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Abstract 

The safe-consensus task was introduced by Afek, Gafni and Lieber (DISC’09) as a weakening 
of the classic consensus. When there is concurrency, the consensus output can be arbitrary, not 
even the input of any process. They showed that safe-consensus is equivalent to consensus, in a 
wait-free system. We study the solvability of consensus in three shared memory iterated models 
extended with the power of safe-consensus black boxes. In the first model, for the z-th itera¬ 
tion, processes write to the memory, invoke safe-consensus boxes and finally they snapshot the 
memory. We show that in this model, any wait-free implementation of consensus requires (”) 
safe-consensus black-boxes and this bound is tight. In a second iterated model, the processes 
write to memory, then they snapshot it and finally they invoke safe-consensus boxes. We prove 
that in this model, consensus cannot be implemented. In the last iterated model, processes first 
invoke safe-consensus, then they write to memory and finally they snapshot it. We show that 
this model is equivalent to the previous model and thus consensus cannot be implemented. 

Keywords: Consensus, safe-consensus, coalition, Johnson graph, connectivity, distributed al¬ 
gorithms, lower bounds, wait-free computing, iterated models. 


*A Preliminar version of these results appeared in SIROCCO 2014. 
f Preliminary version, submitted for publication to a journal. 
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1 Introduction 


The ability to agree on a common decision is key to distributed computing. The most widely 
studied agreement abstraction is consensus. In the consensus task each process proposes a value, 
and all correct processes have to decide the same value. In addition, validity requires that the 
decided value is a proposed value. 

Herlihy’s seminal paper m examined the power of different synchronization primitives for 
wait-free computation , e.g., when computation completes in a finite number of steps by a process, 
regardless of how fast or slow other processes run, and even if some of them halt permanently. 
He showed that consensus is a universal primitive, in the sense that a solution to consensus (with 
read/write registers) can be used to implement any synchronization primitive in a wait-free manner. 
Also, consensus cannot be wait-free implemented from read/write registers alone [22, 133) : indeed, 
all modern shared-memory multiprocessors provide some form of universal primitive. 

Afek, Gafni and Lieber [2] introduced safe-consensus, which seemed to be a synchronization 
primitive much weaker than consensus. The validity requirement becomes: if the first process to 
invoke the task returns before any other process invokes it, then it outputs its input; otherwise, 
when there is concurrency, the consensus output can be arbitrary, not even the input of any process. 
In any case, all processes must agree on the same output value. Trivially, consensus implements 
safe-consensus. Surprisingly, they proved that the converse is also true, by presenting a wait-free 
implementation of consensus using safe-consensus black-boxes and read/write registers. Why is it 
then, that safe-consensus seems a much weaker synchronization primitive? 

Our Results. We show that while consensus and safe-consensus are wait-free equivalent, any 
wait-free implementation of consensus for n processes requires (!)) safe-consensus black-boxes, and 
this bound is tight. 

Our main result is the lower bound. It uses connectivity arguments based on subgraphs of 
Johnson graphs, and an intricate combinatorial and bivalency argument, that yields a detailed 
bound on how many safe-consensus objects of each type (fan-in) are used by the implementation 
protocol. For the upper bound, we present a simple protocol, based on the new g-2coalitions- 
consensus task, which may be of independent interest)]] 

We develop our results in an iterated model of computation [353, where the processes repeatedly: 
write their information to a (fresh) shared array, invoke (fresh) safe-consensus boxes and snapshot 
the contents of the shared array. 

Also, we study the solvability of consensus in two alternate iterated models extended with safe- 
consensus. In the first model, the processes write to memory, then they snapshot it and finally 
they invoke safe-consensus boxes. We prove that in this model, consensus cannot be implemented 
from safe-consensus. In the second model, processes first invoke safe-consensus, then they write to 
shared memory and finally they snapshot the contents of the memory. We show that this model is 
equivalent to the previous model and thus consensus cannot be solved in this model. 

Related Work. Distributed computing theory has been concerned from early on with understand¬ 
ing the relative power of synchronization primitives. The wait-free context is the basis to study 
other failure models e.g. [9], and there is a characterization of the wait-free, read/write solvable 
tasks [31] . For instance, the weakening of consensus, set agreement, where n processes may agree 
on at most n — 1 different input values, is still not wait-free solvable maun ee] with read/write 

1 These results appeared for the first time in the Proceedings of the 21st International Colloquium on Structural 
Information and Communication Complexity ng. 
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registers only. The renaming task where n processes have to agree on at most 2n — 1 names has 
also been studied in detail e.g. 

Iterated models e.g. na \m, mi m mi ezi facilitate impossibility results, and (although more 
restrictive) facilitate the analysis of protocols [25], We follow in this paper the approach of [26] 
that used an iterated model to prove the separation result that set agreement can implement 
renaming but not vice-versa, and expect our result can be extended to a general model model using 
simulations, as was done in [23] for that separation result. For an overview of the use of topology 
to study computability, including the use of iterated models and simulations see [28]. 

Afek, Gafni and Lieber [2] presented a wait-free protocol that implements consensus using (!)) 
safe-consensus black-boxes (and read/write registers). Since our implementation uses the weaker, 
iterated form of shared-memory, it is easier to prove correct. Safe-consensus was used in [2] to show 
that the g-tight-group-renaming task [3] is as powerful as g-consensus. 

The idea of the classical consensus impossibility result [22, 33] is (roughly speaking) that the 
executions of a protocol in such a system can be represented by a graph which is always connected. 
The connectivity invariance has been proved in many papers using the critical state argument 
introduced in [22], or sometimes using a layered analysis as in [33 j. Connectivity can be used also 
to prove time lower bounds e.g. 121 ED El- We extend here the layered analysis to prove the lower 
bound result on the number of safe-consensus objects needed to implement consensus. Also, our 
results show that when the basic shared memory iterated model is used with objects stronger than 
read/write memory, care has be taken in the way they are added to the model, as the resulting 
power of the model to solve tasks can vary. 

In a previous work m we had already studied an iterated model extended with the power 
of safe-consensus. However, that model had the restriction that in each iteration, all processes 
invoke the same safe-consensus object. We showed that set agreement can be implemented, but 
not consensus. The impossibility proof uses much simpler connectivity arguments than those of 
this paper. 

The paper is organized as follows. Section [2] describes the basic concepts and previous results 
of the models of computation. This section can be skipped by readers familiar with standard 
distributed computing notions. Section [3] defines the three iterated models of computation that we 
investigate and also we present the main results for each model. Section [4] is devoted to develop 
all the results obtained for our first iterated model, in it the processes write to memory, invoke the 
safe-consensus objects and then they snapshot the shared memory. For this model, our results are 
the following: 


We construct a protocol that solves n-process consensus using (”) safe-consensus boxes (Sec¬ 
tion 4.1). We give our consensus protocol using the new 2coalitions-consensus task. 


• We describe for the case of three processes the main result for this iterated model, which is 
also the main result of this paper, it is a lower bound on the number of safe-consensus objects 
needed to solve consensus in this iterated model (Section |4.2[ ). The 3-process case illustrates 
some of the main ideas of the general case. The full proof of the lower bound for n processes 
is given in the Appendices. 


Section[5]is dedicated to our second iterated model with safe-consensus. In this model, the processes 
first write to memory, then they snapshot the contents of the memory and after that, they invoke 
safe-consensus objects. We prove that in this model, consensus cannot be implemented. In Section 
[6] we develop our last iterated model extended with safe-consensus. In this model, the processes 
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first invoke safe-consensus objects, then they write to the memory and finally, they snapshot the 
shared memory. We prove that this model is equivalent to the previous model (for task solvability), 
thus the consensus task cannot be implemented in this model. Section [7] contains our conclusions 
and some open problems. 

2 Basic definitions 

In this section, we introduce the model of computation and present many basic concepts used in 
this paper. We follow the usual definitions and extend some concepts from PE!- 

2.1 Distributed systems 

Our formal model is an extension of the standard iterated version [12] of the usual read/write 
shared memory model e.g. |[7|. A process is a deterministic state machine, which has a (possible 
infinite) set of local states, including a subset called the initial states and a subset called the output 
states. 

A shared object 0 has a domain D of input values, and a domain D' of output values. 0 provides 
a unique operation, O.exec(d), that receives an input value d G D and returns instantaneously an 
output value d' G D'. 

A one-shot snapshot object S' is a shared memory array S [1,..., n] with one entry per process. 
That array is initialized to [_L, .where 1 is a default value that cannot be written by a 
process. The snapshot object S provides two atomic operations that can be used by a process at 
most once: 

• S.update(u): when called by process pj, it writes the value v to the register S [j]. 

• S.scanQ: returns a copy of the whole shared memory array S. 

It is also customary to make no assumptions about the size of the registers of the shared memory, 
and therefore we may assume that each process pi can write its entire local state in a single register. 
Notice that the snapshot operation can be implemented in read/write shared memory, according 
to [Mi]. 

A system consists of the following data: 

• A set of n ^ 1 processes II = {p \,... ,p n }; 

• a shared memory SM [i] (i ^ 0) structured as an infinite sequence of snapshot objects; 

• an infinite sequence S [j] (j ^ 0) of shared objects. 

A global state of a system is a vector S of the form 

S = (si,.. .,s n ;SM), 

where Si is the local state of process pi € U and SM is the shared memory of the system. An 
initial state is a state in which every local state is an initial local state and all register in the shared 
memory are set to _L. A decision state is a state in which all local states are output states. When 
referring to a global state S, we usually omit the word global and simply refer to S as a state. 
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2.2 Events and round schedules 

The occurrences that can take place in a system are modeled as events. An event in the system is 
performed by a single process p % £ n, which applies only one of the following actions: a write (W) 
or read (R) operation on the shared memory or an invocation to a shared object (S). Any of these 
operations may be preceded/followed by some local computation, formally a change of the process 
to its next local state. We will need to consider events performed concurrently by the processes. If 
E is any event and pq ,... ,pi k £ II are processes, then we denote the fact that p lx ,... ,pi k execute 
concurrently the event E by E(X), where X = {h, • ■ •, ik}- 

We fix once and for all some notation. Let n = {1,... ,n}, when convenient, we will denote 
E(A) by E(*i, • • •, ik) and if i £ n is a process id, then E(n — {?'}) is written simply as E(n — i). 

A round schedide n is a finite sequence of events of the form 

7r: E x E r (X r ), 

that encodes the way in which the processes with ids in the set |Jj=i Xj perform the events 
Ei,..., E r . For example, the round schedule given by 

W(l, 3), R(l, 3), W(2), R(2), S(l, 2,3) 

means that processes pi,P 3 perform the write and read events concurrently; after that, p 2 executes 
in solo its read and write events and finally all three processes invoked the shared objects concur¬ 
rently. Similarly, the round schedule W(l, 2,3), R(l, 2, 3), S(l, 2, 3) says that pi,P 2 and p^ execute 
concurrently the write and read events in the shared memory and then they invoked the shared 
objects concurrently. 

2.3 Protocols and executions 

The state machine of each process pi £ II is called a local protocol Ai, that determines the steps 
taken by pi. We assume that all local protocols are identical; i.e. Processes have the same state 
machine. A protocol is a collection A of local protocols Ai,.. ■, An- 

For the sake of simplicity, we will give protocols specifications using pseudocode and we establish 
the following conventions: A lowercase variable denotes a local variable, with a subindex that 
indicates to which process it belongs; the shared memory (which is visible to all processes) is 
denoted with uppercase letters. Intuitively, the local state S{ of process pi is composed of the 
contents of all the local variables of p t . Also, we identify two special components of each process’ 
states: an input and an output. It is assumed that initial states differ only in the value of the 
input component; moreover, the input component never changes. The protocol cannot overwrite 
the output, it is initially _L; once a non-T value is written to the output component of the state, it 
never changes; when this occurs, we say that the process decides. The output states are those with 
non-T output values. 

Let A be a protocol. An execution of A is a finite or infinite alternating sequence of states and 
round schedules 

5o, 7Tl, . . . , Sk, 7Tjfc+l, . . • , 

where Sq is an initial state and for each k ^ 1, Sk is the resulting state of applying the sequence 
of events performed by the processes in the way described by the round schedule 7r^. An r-round 
partial execution of A is a finite execution of A of the form Sq, tt\, ..., 5 r _i, 7r r , S r . 
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If P is a state, P is said to be reachable in A if there exists an r-round partial execution of A 
(r ^ 0) that ends in the state P and when there is no confusion about which protocol we refer to, 
we just say that S is reachable. 

Given the protocol A and two states S, R, we say that R is a successor of S in A, if there exists 
an execution a of A such that 

OL — So, 7Tl, ■ • • , S r — S. 7T r _|_i, . . . , 7T r _|_£, S r +k — R , . . . , 

i.e., starting from S, we can run the protocol A k rounds (for some k ^ 0) such that the system 
enters state R. If 7r is any round schedule and S is a state, the successor of S in A obtained by 
running the protocol (starting in the state S ) one round with the round schedule 7r is denoted by 
S ■ IT. 


2.4 Decision tasks 

In distributed computing, a decision task is a problem that must be solved in a distributed system. 
Each process starts with a private input value, communicates with the others, and halts with a 
private output value. Formally, a decision task A is a relation that has a domain Z of input values 
and a domain O of output values; A specifies for each assignment of the inputs to processes on 
which outputs processes can decide. A bounded decision task is a task whose number of input 
values is finite. 

We also refer to decision task simply as tasks. Examples of tasks includes consensus [22j. 
renaming la im and the set agreement task [18] . 

A protocol A solves a decision task A if any finite execution a oi A can be extended to an 
execution a' in which all processes decide on values which are allowable (according to A) for the 
inputs in a. Because the outputs cannot be overwritten, if a process has decided on a value in a, 
it must have the same output in a'. This means that outputs already written by the processes can 
be completed to outputs for all processes that are permissible for the inputs in a. 

A protocol A is wait-free if in any execution of A. a process either it has a finite number of 
events or it decides. This implies that if a process has an infinite number of events, it must decide 
after a finite number of events. Roughly speaking, A is wait-free if any process that continues 
to run will halt with an output value in a fixed number of steps, regardless of delays or failures 
by other processes. However, in our formal model, we do not require the processes to halt; they 
solve the decision task and decide by writing to the output component; processes can continue to 
participate. We typically consider the behavior of a process until it decides, and therefore, the 
above distinction does not matter. 

The study of wait-free shared memory protocols has been fundamental in distributed computing, 
some of the most powerful results have been constructed on top of wait-free protocols nni eh eeieb] ■ 
Also, other variants of distributed systems can be reduced to the wait-free case [H Uni 123- 

Definition of consensus and safe-consensus tasks. 

The tasks of interest in this paper are the consensus and safe-consensus [2] tasks. 

Consensus Every process starts with some initial input value taken from a set I and must output 
a value such that: 
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• Termination: Each process must eventually output some value. 

• Agreement: All processes output the same value. 

• Validity: If some process outputs v, then v is the initial input of some process. 

Safe-consensus Every process starts with some initial input value taken from a set / and must 
output a value such that Termination and Agreement are satisfied, and: 

• Safe-Validity: If a process p t starts executing the task and outputs before any other process 
starts executing the task, then its decision is its own proposed input value. Otherwise, if 
two or more processes access the safe-consensus task concurrently, then any decision value is 
valid. 

The safe-consensus task [2] is the result of weakening the validity condition of consensus. 


3 Iterated models extended with safe-consensus 

Intuitively, a model of distributed computing describes a set of protocols that share some common 
properties and/or restrictions in the way the processes can access the shared objects and these 
restrictions affect the way in which the protocols can be specified. In this paper, we are interested 
in protocols which can be written in a simple and structured way, such that the behavior of the 
system in the ith-iteration, can be described by using the behavior of the (i — l)th-iteration, in an 
inductive way. 

In this section, we introduce an extension of the basic iterated model of [12], adding the power 
of safe-consensus shared objects. We also present all the results of this paper. 


3.1 The iterated model with shared objects 

In the iterated model extended with shared objects, the processes can use two kinds of communica¬ 
tion media. The first is the shared memory SM structured as an infinite array of snapshot objects; 
the second medium is the infinite array S of shared objects (SM and S are described in Section 2.1). 
The processes communicate between them through the snapshot objects and the shared objects of 
S, in an asynchronous and round-based pattern. In all the iterated models that we investigate, we 
make the following assumptions: 


• The operations update and scan of the snapshot objects in SM can be used by a process at 
most once. 

• The exec operation of each shared object in S can be used at most once by each process that 
invokes it. 


When we want to add the power of shared objects to the standard iterated model |T2], we must 
consider two important questions. The first question is: In which order should we place the three 
basic operations (write, read and invoke a shared object) ? We have three possibilities: 

• Write, read from the shared memory and invoke a shared object; 
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• Invoke a shared object, write and read the shared memory; 

• Write to memory, invoke a shared object and read the contents of the shared memory. 

The second question, which is very closely related to the previous one is: Does the order of the main 
operations affect the computational power of the new model (for task solvability) ? In this paper, 
we address these two questions and show the differences of the models of distributed computing 
that we obtain when the shared objects invoked by the processes are safe-consensus objects. 

A safe-consensus object is a shared object that can be invoked by any number of processes. The 
object receives an input value from each process that invokes it, and returns to all the processes 
an output value that satisfies the Agreement and Validity condition of the safe-consensus task. 
In other words, a safe-consensus object is like a “black box” that the processes can use to solve 
instances of the safe-consensus task. The method of using distributed tasks as black boxes inside 
protocols is a standard way to study the relative computational power of distributed tasks (i.e. if 
one task is weaker than another, see m nn [ 26 ]). Notice that safe-consensus shared objects are 
primitives more powerful than the read/write shared memory registers, as the safe-consensus task 
can implement consensus [2], 

From now on, we work exclusively in iterated models, where the shared objects invoked by the 
processes are safe-consensus objects. 

3.2 The WOR iterated model 

We now define the first iterated model that we investigate; in it, processes write to shared memory, 
then they invoke safe-consensus objects and finally they snapshot the shared memory. A protocol 
A is a protocol in the WOR (Write, invoke Object and Read) iterated model if it can be written 
as specified in Figure [TJ 


(1) 

init r <r- 0; sm 4— input ; dec 4— _L; 

val 4— 

(2) 

loop forever 


(3) 

r 4- r + 1; 


(4) 

SM [r] .update(sm, val)', 


(5) 

val 4— S [h({r, id, sm, val))] .exec(v)-, 

(6) 

sm 4— SM [r] ,scan(); 


(7) 

if ( dec = _L) then 


(8) 

dec 4— 6(sm, val)', 


(9) 

end if 


(10) 

end loop 



Figure 1: The WOR iterated model 

An explanation of the pseudocode in Figure [l] follows. All the variables r,sm, val, input and 
dec are local to process pt and only when we analyze a protocol, we add a subindex i to a variable 
to specify it is local to pi. The symbol “id” contains the executing process’ id. Initially, r is zero 
and sm is assigned the contents of the readonly variable input , which contains the input value 
for process pp. all other variables are initialized to _L. In each round, pi increments by one the 
loop counter r, accesses the current shared memory array SM[r\, writing all the information it 



has stored in sm and val (full information) and then pi decides which shared object it is going to 
invoke by executing a deterministic function h that returns an index l, then pi invokes the shared 
object S [l] with some value v. Then, pi takes a snapshot of the shared array and finally, p, : checks 
if dec is equal to _L, if so, it executes a deterministic function <5 to determine if it may decide a 
valid output value or _L. Notice that in each round of a protocol, each process invokes at most one 
safe-consensus object of the array S. 

It turns out that the WOR iterated model is quite different from the two other iterated models. 
This is true because of the following facts: 


The consensus problem for n processes can be solved in the WOR iterated model using only 


( 2 ) safe-consensus black boxes (Theorem 4.1). 


Any protocol in the WOR iterated model which implements consensus using safe-consensus 
objects must use at least Q) safe-consensus objects. 


The second fact, which is a consequence of Theorem 4.2, is the main result of this paper. It 
describes a matching lower bound on the number of safe-consensus objects needed to solve consensus 
by any protocol in the WOR iterated model which implements consensus. In Section [4j we give the 
detailed description of the WOR iterated protocol which implements consensus using safe-consensus 
objects, we prove its correctness and finally, we give the proof of the lower bound on the number 
of safe-consensus objects needed to solve consensus in the WOR iterated model. 


3.3 The WRO iterated model 

The second iterated model that we study is the WRO (Write-Read, invoke Object) iterated model. 
In this model, processes write to shared memory, then they snapshot it, and finally they invoke the 
safe-consensus object(s). We say that a protocol is in the WRO iterated model if it can be written 
in the form given in Figure [2] 


(1) 

init r 4 — 0 

; sm 4 — input ; dec t— _L; val t— _L; 

(2) 

loop forever 

(3) 

r 4 — \ 

r + 1; 

(4) 

SM [ 

r] .update(sm, val); 

(5) 

sm 

4— SM [r] ,scan(); 

(6) 

val 

■<— S [h((r, id, sm, val))] .exec(v); 

(7) 

if ( dec = _L) then 

(8) 


dec 4 — 5(sm, val); 

(9) 

end 

if 

(10) 

end loop 



Figure 2: The WRO iterated model 


This pseudocode is explained in a similar way to that used for the code in Figure [T] the only 
thing that changes is the place where we put the invocations to the safe-consensus shared objects, 
after the execution of the write-snapshot operations. 

In Section [5j we prove that the consensus task cannot be implemented in the WRO iterated 
model using safe-consensus objects (Theorem 5.4), this is the main result for this iterated model. 
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3.4 The OWR iterated model 


The last iterated model that we introduce is constructed by placing the safe-consensus objects 
before the write and snapshot operations. A protocol A is in the OWR (invoke Object, Write- 
Read) iterated model if A can be written in the form specified in Figure [3] 


(1) 

init r t— 0; 

sm t— input; dec 4— _L; val 4— _L; 

(2) 

loop forever 

(3) 

r <r- r 

+ 1; 

(4) 

val 

4— S [h((r, id, sm, val})] .exec(v); 

(5) 

SM[r 

] ,update(sm, val); 

(6) 

sm 

4— SM [rl .scan(); 

(7) 

if (dec = _L) then 

(8) 


dec 4— S(sm, val); 

(9) 

end if 

(10) 

end loop 



Figure 3: The OWR iterated model 

In Section [6| we pove that for task solvability, there is no real difference between the WRO and 
the OWR iterated models. Any protocol in the WRO iterated model can be simulated by a protocol 
in the OWR iterated model and the converse is also true, this is stated formally in Theorem |6.4| 
Combining this result with Theorem |5.4[ we can conclude that it is impossible to solve consensus 
in the OWR iterated model (Corollary |6.5[). 


3.5 Shared objects represented as combinatorial sets 


We now introduce some combinatorial definitions which will help us represent shared objects and 
the specific way in which the processes can invoke these shared objects. These definitions are useful 
in Sections [5] and [U 

For any n 1 and m E n , let V n>m = {c C n | |c| = m}. Given a protocol A, we define for 
each m ^ n the set T^n, m) C V n ^ m as follows: b = {h, • • •, i m } E T^n, m) if and only if in some 
iteration of the protocol A, only the processes Pi x , ■ ■ ■ ,Pi m invoke a safe-consensus object of the 
array S (see F igures [lj [2] and [3]) . Roughly speaking, each c E represents a set of processes 

which together can invoke safe-consensus shared objects in A. 

For example, if m = 3 and c = {i,j,k} E T_ 4 (n, 3), then in at least one round of A, processes 
Pi,Pj and pk invoke a safe-consensus object and if in other iteration or perhaps another execution of 
A, these processes invoke another safe-consensus object in the same way, then these two invocations 
are represented by the same set c E r_ 4 (n, 3), that is, shared objects invoked by the same processes 
are considered as the same element of r_ 4 (n, 3) (repetitions do not count). On the other hand, 
if d = {i,j,l} r_ 4 (n, 3), then there does not exist an execution of A in which only the three 

processes p%,pj and p\ invoke a safe-consensus shared object. For the consensus protocol of Section 
4Tj we have that for n = 4, T^(4, 2) = {{1, 2}, {2,3}, {3,4}}, T^(4,3) = {{1, 2,3}, {2, 3,4}} 
and r^(4,4) = {{1,2,3,4}}. A set b E T^(n,m) is called a m-box or simply a box. An element 
d E r, 4 (n, 1) is called a trivial box, it represents a safe-consensus object invoked only by one process, 
we consider such invocations as useless, because they do not give any additional information to the 
process. We model a process that does not invoke a safe-consensus object as a process that invokes 
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a safe-consensus object and no other process invokes that object, i.e., this safe-consensus object is 
represented by a trivial box. A process pt participates in the box b if i £ b. Let the set r_ 4 (n) and 
the quantities v^(n,m) and n^{n) be defined as follows: 

r .4(n) = Urn=2 r . 4 (n,m); 

v A (n,m) = |r_ 4 (n, m)\; 

"A(n) = Em= 2 ^( n > m )- 

From now on, for all our protocols, we consider global states only at the end of some iteration. 
Suppose that S' is a reachable state in the protocol A. The set of shared objects o±,... ,o q invoked 
by the processes to enter the state S is represented by a set of boxes Inv(S') = { 61 ,..., b q } which 
is called the global invocation specification of S. We assume without loss of generality that in all 
rounds, each process invokes some shared object, that is, the set Inv(S') satisfies 

1J b = n, 

bGlnv(S) 

(a process that does not invoke a safe-consensus object can be seen as a process that invokes a 
safe-consensus object and no other process invokes that object). If b = {Zi,...,Z s } £ Inv(S’) is 
a box representing a safe-consensus shared object invoked by the processes Ph, ■ ■ ■ ,Pi s , we define 
the safe-consensus value of b in S, denoted by scval(6, S ) as the output value of the safe-consensus 
shared object represented by b. 

3.6 Additional definitions on global states 

We now introduce the notions of connectivity and paths between global states. These are well 
known concepts EH ED and have become a fundamental tool to study distributed systems. 

Paths of global states 

Two states S, P are said to be adjacent if there exists a non-empty subset X C n such that all 
processes with ids in X have the same local state in both S and P. That is, for each i £ X, pi 
cannot distinguish between S and P. We denote this by S ~ P. States S and P are connected, if 
we can find a sequence of states (called a path) 

p : S = Pi ~ • • • ~ P r = P, 

such that for all j with 1 ^ j ^ r — 1, Pj and Pj+i are adjacent. 

Connectivity of global states are a key concept for many beautiful results in distributed systems, 
namely, impossibility proof. The indistinguishability of states between processes is the building 
block to construct topological structures based on the executions of a given protocol and is fun¬ 
damental in many papers EDim Era EE]. In addition to the classic definitions of connectivity 
and paths, we also introduce the following concepts. Let q: Q\ r^j • • • nu Qi be a path of connected 
states, define the set of states States(q); the set of indistinguishability sets iSets(q); and the degree 
of indistinguishability degq, of q as follows: 

States(q) = {Q i,.. 
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iSets(q) = {X C n \ (3Qi,Qj £ States(q))(Qj ~ Qj)}; 
degq = min{|X| | X £ iSets(q)}. 

A path s of connected states of A is said to be C -regular if and only if Inv(S') = Inv(Q) for 
all S,Q £ States(s), that is, s is C-regular when all the states in the set States(s) have the same 
global invocation specification. 

Lemma 3.1. Let A be an iterated protocol for n processes , A C n a non-empty set and S,Q two 
reachable states of A in round r, such that for all j £ A, pj has the same snapshot information in 
S and Q. Then all processes with ids in A participate in the same boxes in S and Q. 

3.7 Consensus protocols 

We also need some extra definitions regarding consensus protocols: If v is a valid input value of 
consensus for processes and S’ is a state, we say that S is v-valent if in every execution starting 
from S, there exists a process that outputs v. S is univalent if in every execution starting from S, 
processes always outputs the same value. If S is not univalent, then S is bivalent. 

Lemma 3.2. Any two initial states of a protocol for consensus are connected. 

Proof. Let S, P be two initial states. If S and P differ only in the initial value inputi of a single 
process pi, then S and P are adjacent (Only pi can distinguish between the two states, the rest 
of the processes have the same initial values). In the case S and P differ in more that one initial 
value, they can be connected by a sequence of initial states S = S\ rs-' • • • r*j S q = P such that 
Sj,Sj + 1 differ only in the initial value of some process (we obtain Sj + 1 from Sj by changing the 
input value of some process pi , the result is a valid input of the consensus problem), hence they are 
adjacent. In summary, S and P are connected. □ 

We need one last result about consensus protocols, we omit its easy proof. 

Lemma 3.3. Suppose that A is a protocol that solves the consensus task and that I, J are connected 
initial states of A, such that for all rounds r ^ 0, V , J r are connected successor states of I and J 
respectively. Also, assume that I is a v-valent state. Then J is v-valent. 

4 Solving consensus in the WOR iterated model 

In this section, We investigate the solvability of consensus in the WOR iterated model. We first 
show that there exists a protocol in the WOR iterated model for consensus with (™) safe-consensus 
objects. Then we present our main result, the lower bound on the number of safe-consensus 
objects needed by any protocol in the WOR iterated model which implements consensus. We use 
terminology and results from Sections [2] and |3j For simplicity, we refer to any protocol in the WOR 
iterated model as a WOR protocol. 

4.1 Solving consensus with safe-consensus 

In this section, we argue that there exists a WOR protocol that solves the consensus task using 
precisely ((j) safe-consensus objects. The complete specification of such protocol is in Figure [8j in 
Appendix [Aj 
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A simple way to describe the protocol that solves consensus is by seeing it as a protocol in 
which the processes use a set of ( 2 ) shared objects which represent an intermediate task which can 
be implemented using one snapshot object and one safe-consensus object. This task is our new 
g-2coalitions-consensus task. It can be defined (roughly) as follows: 


2Coalitions-consensus We have g processes pi,...,p g and each one starts with some initial 
input value of the form x = (vi,V 2 ), where Vi & I U {_L} such that rj / 1 or v-i 7 ^ _L. Let x.left 
denote the value v\ and x. right the value V 2 - if x \,..., x g are the input values of all processes, 
then it must hold that for all i, j such that Xi.left / _L and Xj.left / _L, then Xi.left = Xj.left. 
A similar rule must hold if Xi.right 7 ^ _L and Xj.right 7 ^ _L. Also, there must exists an unique 
process with input value (v, _L) with v / _L and process p g must be the only process with input 
value x g = (_L,t/), where v' / _L. Each process must output a value such that Termination and 
Agreement are satisfied, and: 

• 2 coalitions-Validity: If some process outputs v, then there must exists a process pj with input 
Xj such that xj = (v, u ) or Xj = (u , v) with v G /. 

Using the task g- 2 coalitions-consensus, the protocol in Figure [ 8 ] can be described graphically as 
shown in Figure [ 4 ], for the case of n = 4 . In each round of the protocol, some processes invoke a 
2 coalitions-consensus object, represented by the symbol 2 CQ. In round one, pi and po invoke the 
object 2 CQ with input values (t>i,_L) and (T,^) respectively, (where Vi is the initial input value 
of process pi) and the consensus output 74 of 2 CCi is stored by p\ and P2 in some local variables. 
In round two, P2 and p 3 invoke the 2CC2 object with inputs (7x2, _L) and (±,773) respectively and 
they keep the output value U2 in local variables. Round three is executed by P3 and p4 in a similar 
way, to obtain the consensus value 7x3 from the 2 coalition-consensus object 2CC3. At the beginning 
of round four, pi,p2 and P3 gather the values u\,U2 obtained from the objects 2 CCi and 2CC2 
to invoke the 2CC4 2 coalition-consensus object with the input values (74, _L), (74, 112 ) and (_L,tx2) 
respectively (Notice that P2 uses a tuple with both values 74 and 74) and they obtain a consensus 
value 7x4. Similar actions are taken by the processes p2,P3 and P4 in round five with the shared 
object 2CC5 and the values 7x2,7x3 to compute an unique value 7x5. Finally, in round six, all processes 
invoke the last shared object 2CCg, with the respective input tuples 

(7x4, -L), (7x4, tx 5 ), (tx 4 , tx 5 ), (_L, tx 5 ), 


and the shared object returns to all processes an unique output value u, which is the decided output 
value of all processes, thus this is the final consensus of the processes. 

The protocol of Figure [5] implements g-2coalitions-consensus. Each process pi receives as input a 
tuple with values satisfying the properties of the 2 coalitions-consensus task and then in lines [3]{5j pi 
writes its input tuple in shared memory using the snapshot object SM ; invokes the safe-consensus 
object with its id as input, storing the unique output value u of the shared object in the local 
variable val and finally, pi takes a snapshot of the memory. Later, what happens in Lines [6]fT0 
depends on the output value u of the safe-consensus object. If u = g , then by the Safe-Validity 
property, either p g invoked the object or at least two processes invoked the safe-consensus object 
concurrently and as there is only one process with input tuple (t;,_L), pi will find an index j with 
sm [j] .right 7 ^ _L in line[7j assign this value to dec and in line 11 pi decides. On the other hand, 
if 7 X / g, then again by the Safe-Validity condition of the safe-consensus task, either process p u is 
running and invoked the safe-consensus object or two or more processes invoked concurrently the 
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2CC 6 


2CC 4 2CC 5 



2CCi 2CC 2 2CC 3 

Pi Pi P 2 P 3 PsPa 

Figure 4: The structure of the 4-consensus protocol using 2coalitions-consensus tasks. 


shared object and because all processes with id not equal to g have input tuple (z, y ) with z / _L, 
it is guaranteed that pt can find an index j with sm [j] .left _L and assign this value to dec to 
finally execute line 0 to decide its output value. All processes decide the same value because of 
the properties of the input tuples of the 2coalitions-consensus task and the Agreement property of 
the safe-consensus task. 


(1) procedure g-2coalitions-consensus(v\,V2) 

(2) begin 

(3) SM. update(('Ci,ri 2 )); 

(4) val 4 — saf e-consensus.exec{id)\ 

(5) sm 4— ^M.scanO; 

(6) if val = g then 

( 7 ) dec 4 — choose any sm [j] .right ^ _L; 

(8) else 

( 9 ) dec 4 — choose any sm [j] .left J_; 

(10) end if 

(11) decide dec; 

(12) end 


Figure 5: A g-2coalitions-consensus protocol with one safe-consensus object. 

Theorem 4.1. There exists a WOR protocol that solves the consensus task for n processes using 
( 2 ) safe-consensus objects. 

The proof of Theorem |4.1| and the correctness proof of the 2coalitions-consensus protocol of 
Figure [5] are given in Appendix [A) 

4.2 The lower bound 

The main result of this paper is a matching lower bound on the number of safe-consensus objects 
needed to solve consensus using safe-consensus. Our lower bound proof is based partly on standard 
bivalency arguments [22j, but in order to be able to apply them, a careful combinatorial work 
is necessary. We provide here the full proof for the case of three processes, the general case is 
described in detail in Appendices [B] and [C] 
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Further model terminology. 


In all our proofs concerning the WOR iterated model, we assume that the input values that the 
processes feed to the safe-consensus objects are their own ids (without loss of generality). We now 
define a set of round schedules that will be very useful for the rest of the paper. Given q ^ 1 
disjoint sets A \,..., A q C n, define the round schedule £(Ai,..., A q , Y) for A as: 

W(Al), S(^), R(Ai), .. ., \N(A q ),S(A q ), R(A q ),\N(Y),S(Y), R(Y), (1) 

where Y = n — (Uf=i A-i). Sometimes, if there is no confusion, we omit the set Y and just write 
£(Ai,..., A q ). For any state S and u ^ 0, define 


S-C(A 1: ...,A q ) 


S if u = 0, 

(S ■ £ u- 1 (Ai,..., A q )) ■ f(A 1 ,... ,A q ) otherwise. 


I.e. S ■ f u (A \,..., A q ) is the state that we obtain after we run the protocol A (starting from S) u 
rounds with the round schedule £(Ai, ..., A q ) in each iteration. 

Our lower bound says that any WOR consensus protocol A using safe-consensus, must satisfy 
the inequality ^(n) ^ (!() for all n ^ 2 . Moreover, A also satisfies the inequalities n^(n, m) > n—m 
for all n ^ 2 and 2 ^ m ^ n. 


The connectivity of iterated protocols with safe-consensus. 

Roughly, a typical consensus impossibility proof shows that a protocol A cannot solve consensus 
because there exist one execution of A in which processes decide a consensus value v and a second 
execution of A where the consensus output of the processes is v', with v / v', such that the global 
states of these executions can be connected with paths of connected states. The existence of such 
paths will imply that in some execution of A, some processes decide distinct output values [151, 
EH EH [33], violating the Agreement requirement of consensus. Any protocol that solves consensus, 
must be able to destroy these paths of connected states. 

For the case of our lower bound proof, the main circumstance that will prevent A from solving 
consensus is that for some mo G { 2 ,..., n}, it is true that ^(n, mo) ^ n — mo, i.e., at most n — mo 
subsets of processes of size mo can invoke safe-consensus shared objects in the protocol A. 


The lower bound for 3-process consensus protocols. 

We are ready to present our main result, it is the following 

Theorem 4.2. If A is a WOR protocol for n-consensus using safe-consensus objects, then for every 
m G {2, ..., n}, vjyfri, m) > n — m. 


Theorem |4.2| describes the minimum number of different ways in which m processes must invoke 
safe-consensus shared objects, in order to be able to solve the consensus task, for each m = 2 ,..., n. 
The lower bound on the total number of safe-consensus objects necessary to implement consensus, 


is an easy consequence of Theorem 4.2 and the definition of z/ 4 (n). 

Here we present the full proof of the lower bound, for three processes WOR protocols with 
safe-consensus. We will show that if A is a protocol which solves consensus for three processes, 
then A must satisfy the inequalities 


z/ 4(3, m) > 3 — m for m G {2,3}. 
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As usual, the proof is by contradiction, we investigate what happens if A does not satisfy the given 
inequalities for some mo- We will divide the proof in two cases. 


Case mo = 2 Assume that A is a protocol with safe-consensus such that 224 ( 3 , 2 ) ^3 — 2 = 1, 
that is, at most two fixed processes can invoke together safe-consensus shared objects. To begin, 
we need a small combinatorial result. 


Lemma 4.3. Let U C V n _2 with \U\ ^ n — 2. Then there exists a partition n = Au B such that 

(V6 £ U)(b C A or b C B). (2) 

The previous result can be proven using subgraphs of Johnson graphs. Lemma |4.3| will help us 


to prove Lemma 4.6, which is a structural result that we use to construct a bivalency argument to 


show the lower bound for the case of mo = 2 in the proof of Theorem 4.2 


Lemma 4.4. Let S be a state of A in some round r ^ 0 and n = AU B a partition of n such that 


(V6 £ T^(3,2))(6 C A or b C B). (3) 

B — A 

Then there exists the sequence p : S ■ £ (A) s-m r\_/ S ■ £(B) of connected states in round r + 1 
of A. 

Proof. We show that the path p can be build from the hypothesis. To do this, it is enough to show 
that there exists the possibility that the output values of the safe-consensus shared objects invoked 
by the processes are the same in the three states S ■ £(A), S ■ £(3) and S ■ f(B). We have cases, 
according to the way in which the processes invoke the safe-consensus objects in round r + 1. 

Case a). If each process invokes in solo a safe-consensus object, then by the Safe-Validity 
property of safe-consensus, each process receives its own id as output value from the shared 
object it invokes, so that all processes see the same output values from the safe-consensus 
objects in the states S ■ £(A), S ■ 3) and S ■ f(B). 

Case b). Suppose that processes Pi,Pj invoke a shared object and pk invokes in solo another 
safe-consensus object. This fact is represented by the 2-box b\ = {i,j} and the trivial box 
62 = {k}. By the Safe-Validity property of safe-consensus, py- always receives as output value 
from the shared object represented by 62 its own id, thus pk sees the same safe-consensus 
value in the three states. Now, as b\ £ ^(3,2), by Equation ([ 3 ]), we know that b\ C A or 
b\ C B, so that in each state of p, processes Pi,Pj invoke concurrently the safe-consensus 
object represented by b\ and by the Safe-Validity property, the return value of the shared 
object can be arbitrary, thus there exists executions of A in which we can make the safe- 
consensus object represented by b\ output the same value in the three states S ■ £(A), S ■ 3) 

and S-£(B). 

Case c). Now suppose that all three processes invoke the same safe-consensus object, which 
is represented by the 3-box 6 = 3. Because 3 = A U B and A n B = 0, it must be true that 
\b n A\ = 2 or \b n B\ = 2. Without loss, assume that \b n A\ = 2, then |6 PI B\ = 1 and by 
the Safe-Validity property, the output value of the shared object represented by 6 must be 
l £ 6 fl B in the state S ■ f(B) and in the states S ■ £(A), S ■ 3), the output value can be 
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arbitrary, this is because in these two states, at least two processes are invoking concurrently 
the safe-consensus object represented by b. Therefore there exists executions of A in which 
the output value of the safe-consensus object is l in the three states S ■ £(A),S ■ £(3) and 
S ■ £(B). It follows that the path p of the conclusion exists. 

□ 


Lemma 4.5. Suppose that for the protocol A there exist a partition n = AU B satisfying Equation 
@ and a sequence p: S 0 • • • rsj Si of connected states in round r ^ 0 of A, such that Xi = 

Yi y s 

A or Xi = B for all i E {1,. .., l}. Then in round r + 1 of A there exists a path q: Qo ~ • • • ~ Q s 
of connected states and the following properties hold: 


I) Each state Qk is of the form Q = Sj ■ £{X), where X = A or X = B; 

II) (Vj £ {1, ■. •, = A or Yj = B). 

Proof. To find the path q satisfying I) and II), we use induction on l. In the base case l = 1, 

p: So S\ with X\ = A or X\ = B. It is easy to see that the path So ■ £(Xi) S\ ■ £(Xi) 

X X / 

fulfills conditions I), II). For the induction hypothesis, suppose that for the path So rs j • • • r^j S V 

with 1 ^ l' < l, we have build the path q': Q\ rvi • • • Q s / satisfying I) and II) of the conclusion 
of the Lemma. We now show how to connect Q s > with a successor state of Sy+i. Let Xy + 1 be 
the set of processes that cannot distinguish between Sy and Sy + j. By the induction hypothesis, 
Q s ' = Sy • £(X), where X = A or X = B. We have cases. 

Case X = Xy + i. In this case we use the small path Sy ■ £(X) ~ Sy + \ ■ £(X). 


Case X ^ Xy + i. Without loss of generality, assume that X = A and Xy + \ = B. We apply 

B —A 

to obtain the path Sy ■ f (A) Combining this path with 


Lemma 


4.4 


the path Sy ■ f(B) ~ Sy + \ ■ £(B), we are done. 


We have build with induction the sequence of connected states Q\,...,Q S from the sequence 
S\,... ,Si satisfying the demanded properties. The result follows. □ 


Lemma 4.6. If A is a WOR protocol for three processes using safe-consensus objects with ^(3,2) 
^ 1 and I is an initial state in A, then there exists a partition of the set 3 = A U B such that for 
all u ^ 1, the states I ■ £, U (A) and I ■ f u (B) are connected. 


Proof. We can apply Lemma 


4.3 


to the set T_4(3, 2) C V 3/2 to find the partition of 3 and then we 
use induction combined with Lemma 14.51 We omit the details. □ 


Case mo = 3 The last case to consider is when the three processes cannot invoke the same safe- 
consensus shared object together. To prove this case, we need one structural result, regarding paths 
of connected states in an iterated protocol. With this result, we can build a bivalency argument to 


prove the lower bound for the case of mo = 3 in the proof of Theorem 4.2 


Lemma 4.7. Suppose that A is a WOR protocol with safe-consensus objects for three processes such 
that 1 / 4 ( 3 ,3) = 0 . If S,Q are two initial states in A, connected with a sequence qo: S ~ • • • ~ Q, 
then for all u ^ 0, there exist successor states S U ,Q U of S and Q respectively, in round u of A, 
such that S u and Q u are connected. 
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Proof. Let A be a protocol for three processes with 1^(3, 3) = 0. As for round u = 0, we have 
the path qo, to prove the result it is enough to show that if for u A 0, we have build the path 
q u : S u ~ • • • ~ Q u , connecting the states S u and Q u , then in round u + 1 of A we can find a new 
path 

q u +i: S u+1 ~ ~ Q u +\ 

which connects S"“ +1 and Q u+1 , succesor states of S u and Q u respectively. 

X x 

Assume then that we have the path : Sq rsj • • • rJj S q , where S u = S\ and Sq = Q u . We 
proceed by induction on q. For the base case q = 1, we have that q u is the path Sq S±, here we 
easily build the path So ■ £(Xi) Si ■ £(Xi). Suppose that for 1 ^ l < q, we have build the path 
q': Ri rs_/ • • • r*j R s , where R\ is a succesor state of S\ and R s = Si ■ £(A) is a succesor states of Si. 
We now wish to connect R s (a succesor state of Si) with a succesor state of Si+i- Let Xi + \ be the 
set of processes wich cannot distinguish between Si and Si + \. As ^(3,3) = 0, In any execution of 
A , the three processes cannot invoke the same safe-consensus shared object, thus in round u + 1 of 
A, they must invoke the safe-consensus objects in one of the following two possibilities: 

• Each process invokes a safe-consensus object in solo. 

• Two processes invoke a safe-consensus object and the third process invokes in solo another 
shared object. 

If the processes invoke three separate safe-consensus objects, then we build the following path from 
Rs = S r H(X) to S i+1 ■ £{Xt +1 ) 

Si • ^(X) 5 ~ Y Si • £(3) 3_ ~ +1 S t • £(*j+i) S i+1 ■ aXi+i). (4) 

As each process sees its own id as the output value of the safe-consensus object it invokes, then 
the only way that a process can distinguish between two states, is by means of the contents of the 
shared memory. Therefore the path given in Equation Q exists. 

In case that two processes invoke a safe-consensus object, represented by the 2-box b £ T_4(3, 2) 
and the other process invokes in solo an object represented by the trivial box c, then we build a 
path from R s = 5/ • £(A") to Si + 1 • £pQ + i) as follows: First notice that the two states Si ■ f(X) and 
Si ■ £(3) are indistinguishable for the processes with ids in the set 3 — X, this is because we can 
find executions of A in which the safe-consensus values of the objects represented by b and c are 
the same in the two previous states (Safe-Validity), proving this is an easy case analysis. Now, we 
need to connect the state Si ■ £(3) with the state Si ■ £(A) + i). We have subcases on the size of the 
set Xi_ |_i. 

Case |A) + i| = 1. If Xi + \ = c, then we have that Si ■ £(3) ~ Si ■ £(A) + i), because by the 
Safe-Validity property of safe-consensus, we can find executions of A in which the output 
value of the safe-consensus object represented by b is the same in the states Si ■ £(3) and 
Si ■ £(Xi + i), thus all processes with ids in b cannot distinguish between these two states. On 
the other hand, if Xi + \ c, then Xi + \ C b and we have the path Si ■ £(3) rs-/ SiA(x l+ i). 

Case |A)_|_i| = 2. If Xi + \ = 6, then we claim that, as in the last part of the previous case, 
Si • m Si ■ £(W + i). When Xi + ± A b, it must be true that Xi + \ = {j} U c, where j £ b. 
The path that we need to build here is 

Si • £(3) £ Si • a{j}) ~ St • £({j}, c) £ Si • £({j} U c). 
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The arguments to prove that this path exists, are very similar to previous arguments, using 
the Safe-Validity property of the safe-consensus task. This finishes the cases to connect the 
states Si ■ £(3) and Si ■ £(A} + i). 

Finally, we connect the states Si ■ £(A} +1 ) and Si + i • £(A} + i) with the small path Si ■ £(A} +1 ) ~ 
Si + 1 ■ £(X/ + i). Thus, we have connected the state R s = Si ■ £(X) with a successor state of S/+i and 
this completes the proof of the induction step. 

Therefore we have proven using induction, that given the path q u , connecting the states Si = S u 
and Sg = Q u , we can build a new path q u+ i, connecting successor states of Si = S u and S q = Q u 
respectively. This finishes the proof. □ 


Proof of Theorem 4.2 (Case n = 3) Assume that there is some mo £ {2,3} such that 


is A ( 3, mo) ^ 3 — mo- Let 0,U be the initial states in which all processes have as input values 
Os and Is respectively. We now find successor states of O and U in each round r ^ 0, which are 
connected. We have cases: 


Case mo = 2. By Lemma 4.6, there exists a partition of 3 = A U B such that for any state S 
and any r ^ 0, S ■ f r (A) and S ■ f r (B) are connected. Let OU be the initial state in which all 
processes with ids in A have as input value Os and all processes with ids in B have as input 
values Is. Then for all r ^ 0 

0-e(A)~0U-C(A) and OU ■ £ r (5) ~ U ■ ?(B) 


and by Lemma 4.6, the states OU ■ ff (A) and OU ■ f r (B) are connected. Thus, for any r, we 


can connect the states O r = O ■ £ r (A) and U r = U ■ £ r (B). 


Case mo = 3. By Lemma 3.2, we know that any two initial states for consensus are connected, 


so that we can connect O and U with a sequence q of initial states of A, By Lemma 4.7 for 
each round r ^ 0 of A, there exist successor states O r , U r of O and U respectively, such that 
O r and U r are connected. 

In this way, we have connected successor states of O and U in each round of the protocol A. Now, 
O is a 0-valent, initial state, which is connected to the initial state U, so that we can apply Lemma 
3.31 to conclude that U is 0-valent. But this contradicts the fact that U is a 1-valent state, so we 


have reached a contradiction. Therefore ^(3, m) >3 — m for m = 2,3. 

With the n = 3 version of Theorem |4.2| at hand, We have the following equalities, proving the 
lower bound result for the case of n = 3 processes. 


^(3) = 1 / 4 ( 3 , 2 ) + u A { 3, 3) > (3 - 2 + 1) + (3 - 3 + 1) = 3 = 


5 The impossibility of consensus in the WRO iterated model 

In this section, we give a negative result concerning protocols in the WRO iterated model; namely, 
we show that the following question 

Is every task solvable in read/write shared memory with the addition of safe-consensus objects, 
solvable by a protocol in the WRO iterated model ? 
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It does not have a positive answer. Although there exists wait-free shared memory protocols that 
can solve consensus using safe-consensus objects [2], in this paper we show that there is no protocol 
in the WRO iterated model that solves consensus using safe-consensus objects. For simplicity, we 
will refer to a protocol in the WRO iterated model simply as a WRO protocol. 


5.1 The connectivity of protocols in the WRO iterated model 


In order to prove the impossibility of consensus in the WRO iterated model (Theorem 5.4), we 
need various results that describe the structure of protocols in the WRO iterated model. These 
results tell us that for any given WRO protocol, the connectivity between some specific reachable 
states is high, even with the added power of safe-consensus objects. This is the main reason of why 
consensus cannot be implemented with safe-consensus in the WRO iterated model. 

Lemma 5.1. Let A be a WRO protocol for n processes, Ai = n — i for some i £n and S, Q two 
reachable states of A in round r, such that for all j £ Ai, pj has the same snapshot information in 
S and Q. Then Inv(5) = Inv(Q). 

Proof. Let A be a WRO protocol, A, = n — i and S, Q such that every process pj with j £ A, has 


the same snapshot information in S and Q. By Lemma 3.1, if b £ Inv(S') is a box such that i ^ b, 


then b £ Inv(Q). For the box c £ Inv(S) that contains the id i, we argue by cases: 

Case I. |c| = 1. All processes with ids in Ai participate in the same boxes in both states S 
and Q and p t does not participate in those boxes, thus c = {i} £ Inv(Q). 

Case II. |c| > 1. There exists a process pj with j £ c and j A *■ Then j £ A,, so that by 
Lemma 3.1, c £ Inv(Q). 


We have proven that Inv(S') C Inv(Q) and to show that the other inclusion holds, the argument 
is symmetric. Therefore Inv(5) = Inv(Q). □ 

Our next result describes some of the structure of WRO protocols, it will be most helpful to show 
Theorem 5.4 The following construction will be useful for the rest of the section. If A \,..., A q C n 
(q A 1) is a collection of disjoin subsets of n, define the round schedule rj(Ai, ..., A q , Y ) for A as: 

W(Al), R(A!), W(A 2 ), R(A 2 ),..., W (A q ), R(A q ), W(T), R(F), S(n) 

where Y = n — ((Jf=i -A*)- Sometimes, we omit the set Y and just write rj(Ai, ..., A q ). 

Lemma 5.2. Let n A 2, A a WRO protocol with safe-consensus objects and i,j £ n. Then for any 
reachable state S in round r A 0 of A, the states S-r)(n — i ) and S - 77(71 — j) are connected in round 
r + 1 of A with a C-regular path q with deg q ^ n — 1. 

Proof. If * = j , the result is immediate. Suppose that i A 3 and n — i = {h ,..., l n - 1 } with l n -\ = j. 
We show that Qi = S ■ p(n — i) and Qj = S ■ rj(n — j) can be connected with a C-regular sequence 
with indistinguishability degree n — 1 by building three subsequences qi, q 2 and q 3 . Using Lemma 


5.1 and the properties of the safe-consensus task to find executions of A in which the safe-consensus 
values are adecuate, we can show that the first path qi is given by 


S ■ rj(n — i, i ) n ~ 1 S ■ p(li,n — {i, h},i) 


11-I2 


n—In 


S • Tj{l\ , . . . , In —15 0? 
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which is clearly a C-regular path by Lemma |5.1| In the same way, we construct the sequence q 2 as 

S ■ rj(h,.. n S ■ rj(h,.. .,{l n - 1 , *}) S ■ rj(h ,.. 1 ) 

and finally, in a very similar way, we build q 3 as follows, 


5 • n(h, In- 1) n ~" 2 5 • rj(h, . . . , {In- 2 , *}, Z n _ a ) 


^ In—3 


n—1 2 


S ■ r){h,n - {h,l n -i},l n -i) n ~ U S ■ rj(n - l n -i,l n -i). 


Applying Lemma |5.1[ both q 2 and q 3 are C-regular paths and for k = 1,2,3, deg q/- = n — 1. 
Notice that the processes execute the safe-consensus objects in the same way in all the states of the 


previous sequences, and by Lemma 5.1, all the states have the same invocation specification. With 
all this data, we can find executions of A in which the states of the sequences q s (s = 1, 2,3) have the 
same safe-consensus value for all the boxes. As j = l n - 1 , S ■ r]{n — l n -i, l n -x) = S ■ rj(n — j, j) = Qj, 
thus we can join qi, q 2 and q 3 to obtain a C-regular path q: Qi ~ ~ Qj such that deg q = n — 1. 

This finishes the proof. □ 


Lemma 5.3. Let A be a WRO protocol and S r , P r be two reachable states of some round r ^ 0 
such that S r and P r are connected with a sequence s such that degs ^ n — 1; suppose also that the 
number of participating processes is n ^ 2. Then there exists successor states S r+1 , P r+1 of S r and 
P r respectively, in round r + 1 of A, such that S r+1 and P r+1 are connected with a C-regular path 
q with deg q ^ n — 1. 

Proof. Suppose that S r and P r are connected with a sequence s: S r = Si • • • r^j Sm = P T 
such that for all j (1 ^ j ^ m — 1), Sj ~ Sj + i, where |X| ^ n — 1. Let p\,... ,p n be the set of 
participating processes. We now construct a sequence of connected states 

q: Qi ~ • • • ~ Q s , 


in such a way that each Qi is a successor state of some Sj and degq ^ n — 1. We use induction on 
m; for the basis, consider the adjacent states Si, S '2 and suppose that all processes with ids in the 


set X\ (|Afi| ^ n — 1) cannot distinguish between them. By Lemma 5.1 the states Q\ = .Sj • r](X 1 ) 
and Q 2 = S 2 ■ ^(Ad) satisfy the equality Inv(Qi) = Inv(Q2) and with appropriate executions of 

A, we can see that Q 1 and Q 2 are indistinguishable for X\, and so the small sequence Q\ 
has indistinguishability degree at least n — 1. Assume now that we have build the sequence 


Q2 


q': Qi 




Qs 


q (1 ^ q < m) such that q' is C-regular , deg q' ^ n — 1 


with \X q \ ^ n — 1 be a set of processes’ ids that 


of connected successor states for S\ rsj . . . r^j 
and Q s ' = Sq ■ rj(X) with |A| ^ n — 1. Let X, 
cannot distinguish between S q and S q+ To connect Q s / with a successor state for S q+ 1 , we first 
use Lemma 5.2 to connect Q s > and Q = S q ■ rj(X q ) by means of a C-regular sequence p such that 


x n 


degp ^ n — 1. Second, notice that we have the small C-regular path s: Q V1 • viXq) = Q s ' + 1- 
In the end, we use q',p and s to get a C-regular sequence 


q: Qi ~ • • • ~ Qs'+i, 

which fulfills the inequality degq ^ n — 1. By induction, the result follows. 


®§ 


21 






Theorem 5.4. There is no protocol for consensus in the WRO iterated model using safe-consensus 
objects. 


Proof. Suppose A is a WRO protocol that solves consensus with safe-consensus objects and without 
loss, assume that 0,1 are two valid input values. Let O , U be the initial states in which all processes 
have as initial values only 0 and 1 respectively. By Lemma 3.2, O and U are connected and it 


is easy to see that the sequence joining O and U, build in the proof on Lemma |3.2| has degree of 
indistinguishability n — 1. So that applying an easy induction, we can use Lemma [5.3| to show 
that there exists connected successor states O r ,U r of O and U respectively in each round r ^ 0 
of the protocol A. Clearly, O is a 0-valent state and by Lemma 3.3, U is 0-valent. But this is a 
contradiction, because U is a 1-valent state. Therefore no such protocol A can exists. □ 


6 The equivalence of the WRO and OWR iterated models 


In this section, we prove Theorem 6.4 which tell us that the WRO and the OWR iterated models 
have the same computational power. To check the meaning of some definition or previous result, 
the reader may consult Sections [2j 3.3 and 3.4 For the sake of simplicity, we will refer to a protocol 
in the OWR iterated model, simply as a OWR protocol. 


6.1 Transforming a WRO protocol into an OWR protocol 

The algorithm of Figure [ 6 ] is a generic OWR protocol to simulate protocols in the WRO iterated 
model. Suppose that A is a WRO protocol that solves a task A and assume that h_A is the 
deterministic function to select safe-consensus objects in A and 8 y 4 is the decision map used in the 
protocol A. To obtain a OWR protocol B that simulates the behavior of A, we use the generic 
protocol of Figure [ 6 j replacing the functions h and 5 with h_ 4 and 5_ 4 respectively. If the processes 
execute B with valid input values from A, then in the first round, the participating processes 
discard the output value of the safe-consensus object that they invoke, because the test at line Q 
is successful and after that, each process goes on to execute the write-snapshot operations, with 
the same values that they would use to perform the same operations in round one of A; later, at 


lines (13)-(15), they do some local computing to try to decide an output value. It is clear from the 


code of the generic protocol that none of the executing processes will write a non-A value to the 
local variables dec, thus no process makes a decision in the first round and they finish the current 
round, only with two simulated operations from A: write and snapshot. In the second round, the 
processes invoke one or more safe-consensus objects at line ([5]), accordingly to the return values 
of the function / 14 , which is invoked with the values obtained from the snapshot operation of the 
previous round (from the round-one write-read simulation of A) and notice that instead of using 
the current value of the round counter r, the processes call h. 4 with the parameter r — 1 . As r = 2 , 
then the processes invoke hj\ as if they were still executing the first round of the simulated protocol 
A. Finally, after using the safe-consensus objects, processes do local computations in lines (|8|)-(10), 


using the decision map d 4 to simulate the decision phase of A, if for some process pj, it is time 
to take a decision in A, it stores the output value in the local variable dec'-, which is used at the 
end of the round to write the output value in decj and then pj has decided. If the map 5a returns 
A, then pj goes on to do the next write-read operations (simulating the beginning of round two of 
A) and proceeds to round three of B. The described behavior is going to repeat in all subsequent 
rounds. 
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Algorithm WRO-Simulation 


(1) 

init r ■<— 0; sm, tmp input ; dec, dec' 4 — L; val _L; 

(2) 

loop forever 


(3) 

r <r- r + 1; 


( 4 ) 

sm <— tmp ; 


(5) 

val <— S [h_(r — 1, id, 

sm, val)] .exec(id); 

(6) 

if (r = 1) then 


( 7 ) 

val <r- L; 

/* 1st round: ignore returned value */ 

(8) 

else if (dec 1 = L) then 


(9) 

dec' «— 5 (sm, val 

); /* Decision of simulated protocol */ 

(10) 

end if 


(11) 

SM [ r } .update(sm, val); 


(12) 

tmp <— SM [r] .scan(); 


(13) 

if ( dec = _L) then 


(14) 

dec <r- dec'; 

/* Decide when simulated protocol decides */ 

(15) 

end if 


(16) 

end loop 



Figure 6: General WRO-simulation protocol in the OWR iterated model 


Correspondence between executions of the protocols 

Let 1 be a round schedule. Denote by it [W, R] the sequence of write and read events of it, these 
events must appear in n [W, R] just in the same order they are specified in n. The symbol n [S] is 
defined for the event S in a similar way. For example, given the round schedule 

7r = W(l, 3), R(1,3),W(2), R(2), S(l, 2,3), 

then vr[W,R] = W(l, 3), R(l, 3), W( 2 ), R( 2 ) and tt [S] = S(l,2,3). If 

7r / = W(l, 2,3), R(l, 2,3), S(l), S(3), S(2), 

we have that ir [W, R] = W(l, 2 , 3), R(l, 2 , 3) and it [S] = S(l), S(3), S( 2 ). 

Let A be a WRO protocol as given in Figure [2j /i^ the deterministic function to select safe- 
consensus objects and < 5.4 the decision map used in the protocol A. A OWR protocol B that 
simulates the behavior of A is obtained by using the generic protocol Q of Figure [ 6 } To construct 
B, we only replace the functions h and S' of Q with h .4 and <5 .4 respectively. 

In order to show that B simulates A. we first notice that there is a correspondence between 
executions of A and B. For, if a is an execution of A such that 

a = So,TTl, Si, . . . 7Tfc, Sfc, TTk+l, • • • 

Then there exists an execution as of B 

(y.J3 Sq , 77^ , S 1 . . • , 7 Tfc , Sfo , 7T fc+1 ,..., 


such that 



S(X 1 )...,S(X s ),7t 1 [W,R] if Z = 1, 
7T;_i [S] , 7 ti [W, R] otherwise, 
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where U)=i Xj = n is an arbitrary partition of n. Conversely, for any execution (3 = Ro, rji, R\,... 
r)k, Rk,r)k+ 1 ,... of the protocol B, we can find an execution 

ft A Bo, t] ^ Rf ~, ?/A:+i >... 


of A such that 

rfi = T)i [W, R] , rji + \ [S] for all l 1. 


Lemma 6.1. Suppose that (3 is an execution of the protocol B and process pt is executing the 
protocol (accordingly to (3) in round r > 0 at line 11 Then the local variables smi,de c' and vali of 


B have the same values of the respectively local variables sm l , dect and vali of the protocol A, when 
Pi finishes executing round r — 1 of A, in the way specified by the execution (3 a- 


Proof. The proof is based on induction on the round number r, the base case and the inductive 
case are obtained by an easy analysis of the programs given in Figures [2] and |6j □ 

The converse of the previous lemma is also true. 

Lemma 6.2. Suppose that a is an execution of the protocol A and process pi is executing the 
protocol (accordingly to a) in round r > 0 at line [7} Then the local variables sm,i,deci and vali of 
A have the same values of the respectively local variables smi^dec^ and vali of the protocol B. when 
Pi finishes executing round r + 1 of B, in the way specified by the execution as- 

The final result that we need to prove that B simulates A for task solvability is an immediate 
consequence of Lemma |6.1[ 

Lemma 6.3. Suppose that A is a decision task solved by the protocol A and let pi G IT Then pi 
decides an output value v in round r > 0 of an execution a of A if and only if pi decides the output 
value v in round r + 1 of B, in the execution ag. 


This shows that the protocol B simulates the behavior of A for task solvability and therefore 


proves the first part of Theorem 6.4 


6.2 Transforming an OWR protocol into a WRO protocol 

Now we show that any OWR protocol can be simulated with a WRO protocol. We follow the 
same technique that we used in the previous section, we use the generic protocol of Figure [7j The 
intuitive argument of how it works is very much the same as in the WRO case, thus we omit the 
details. 

Theorem 6.4. Let A be a protocol in the WRO iterated model which solves a task A. Then A can 
be simulated with a protocol B in the OWR iterated model. Conversely, for every protocol B' in the 
OWR iterated model that solves a task A', there is a protocol A 1 in the WRO iterated model, which 
simulates B'. 

The equivalence of the WRO iterated model with the OWR iterated model can be combined 
with Theorem |5.4| to obtain the following 

Corollary 6.5. There is no protocol in the OWR iterated model for consensus using safe-consensus 
objects. 
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Algorithm OWR-Simulation 

(1) init r 4— 0; sm 4— input ; dec , dec' t— _L; val 4— _L; 

(2) loop forever 

(3) r <— r + 1; 

(4) SM [r] .update(sm, val); 

(5) sm 4— SM [r] .scan(); 

(6) if (r = 1) then 

(7) sm <— input ; /* 1st round: ignore write-snapshot */ 

(8) else if ( dec' = _L) then 

(9) dec! <r- 5 (sm, val)', 

(10) end if 

(11) val 4— S [h_(r, id , sm, val)] .exec{id)', 

(12) if ( dec = _L) then 

(13) dec 4— dec '; 

(14) end if 

(15) end loop 


Figure 7: General OWR-simulation protocol in the WRO iterated model 


7 Conclusion 

In this paper, we have introduced three extensions of the basic iterated model of distributed com¬ 
puting [12], using the safe-consensus task proposed by Yehuda, Gafni and Lieber in [2]. In the first 
iterated model, the WOR iterated model, processes write to memory, invoke safe-consensus objects 
and finally they snapshot the shared memory. We first constructed a WOR protocol which can solve 
n-consensus with (”) safe-consensus objects. To make this protocol more readable, we introduced 
a new group consensus task: The g-2coalitions-consensus task. We also proved that our WOR 
consensus protocol is sharp, by giving a (!)) lower bound on the number of safe-consensus objects 
necessary to implement n-consensus in the WOR iterated model with safe-consensus. This lower 
bound is the main result of this paper, the full proof is somewhat complicated. At the very end, it 
is bivalency [22j . but in order to be able to use bivalency, an intricate connectivity argument must 
be developed, in which we relate the way that the processes use the safe-consensus shared objects 
with subgraphs of the Johnson graphs. As connectivity of graphs appear again in the scene for 
consensus, this suggest that topology will play an important role to understand better the behavior 
of protocols that use shared objects more powerful that read/write shared memory registers. The 
proofs developed to obtain the lower bound say that the connectivity of the topological structures 
given by the shared objects used by the processes, can affect the connectivity of the topology of 
the protocol complex [28] . 

For the second iterated model that we investigated, the WRO iterated model, the processes 
first write to memory, then they snapshot it and after that, they invoke safe-consensus objects. 
We proved that in this model, the consensus task cannot be implemented. The impossibility proof 
uses simpler connectivity arguments that those used in the lower bound proof of the WOR iterated 
model. Finally, in the third iterated model, the OWR iterated model, processes first invoke safe- 
consensus objects, then they write to memory and then they snapshot the contents of the shared 
memory. We proved that this model is equivalent to the WRO iterated model for task solvability, 
thus we obtained as a corollary that consensus cannot be implemented in the OWR iterated model. 
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Concerning the relationship of the standard model of distributed computing mm extended 
with safe-consensus objects used in [2] to implement consensus using safe-consensus objects, we 
can conclude the following. Our results for the WRO and the OWR iterated models say that these 
two models are not equivalent to the standard model with safe-consensus (for task solvability), as 
consensus can be implement in the latter model [2], but consensus cannot be implemented in the 
WRO and OWR iterated models. But an open problem related to these two iterated models is the 
following: Characterize their exact computational power. 

On the other hand, the relationship between the standard model extended with safe-consensus 
and the WOR iterated model remains unknown. Are these two models equivalent? We conjecture 
that the answer is yes. 
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A Appendix: The proofs of Section 4.1 


Here we prove Theorem 4.1 and prove the correctness of the protocol in Figure[ 8 | First, we introduce 
the formal definition of the g-2coalitions-consensus task for g processes. To introduce formally the 
2 coalitions-consensus task, we need to define the set of all valid input values for this new task. 

Let I be a non-empty set of names and J\f = I U {_!_} (J_ ^ I). If x = (v\, V 2 ) G A I X J\f, x.left 


denotes the value v\ and x.right is the value V 2 ■ An ordered 5 -tuple C = (x 1 , 
is a g-coalitions tuple if and only if 


,x g ) G (A f x A f) 9 


(a) For all Xi in C, Xi.left / 1 or Xi.right / _L. 


(b) If Xi,Xj are members of C such that Xi.left / T and Xj.left / _L, then Xi.left = Xj.left. A 
similar rule must hold if Xi.right 7 ^ T and Xj.right 7 ^ T. 

Let 1(C) = {i£g\ xi.left 7 ^ T} and r(C) = {j G 5 \ Xj. right 7 ^ T}. Then we also require that 

(c) |/(C) - r(C) | = 1 and r(C) - 1(C) = {g}. 

Notice that property (a) implies that 1(C) U r(C) = 5 . The set of all 5 -coalitions tuples is denoted 
by C g . We can now define a new distributed task. 


The 5-2coalitions-consensus task We have 5 processes pi,... ,p g and each process pi starts 
with a private input value of the form Xi eAfxAf such that C = (x \,..., x g ) G C g , and C is called 
a global input. In any execution, Termination and Agreement must be satisfied, and in addition: 

• 2coalitions-Validity: If some process outputs c, then there must exists a process pj with input 
Xj such that Xj = (c, v) or Xj = ( v , c) (cG/,nG A f). 


A.l The consensus protocol 

The formal spec of the iterated consensus protocol with safe-consensus objects is given in Figure 
[ 8 j This is a protocol that implements consensus using only (”) 2coalitions-consensus tasks. If we 
suppose that the protocol is correct, then we can use the 5 - 2 coalitions-consensus protocol presented 
in Section |4~I| (Figure |5j) to replace the call to the 2coalitions-consensus objects in Figure[ 8 ]to obtain 
a full iterated protocol that solves the consensus task using (”) safe-consensus objects. 

We now give a short description of how the protocol works. There are precisely (![) rounds 
executed by the processes and in each round, some subset of processes try to agree in a new 
consensus value among two given input values. The local variables step, firstid and lastid are 
used by the processes to store information that tell them which is the current set of processes 
that must try to reach a new agreement in the current round, using a 2 coalitions-consensus object 
(the symbol ”id “ contains the id of the process which is executing the code). The local array 
agreements contains enough local registers used by the processes to store the agreements made in 
each round of the protocol and two distinct processes can have different agreements in agreements. 
Each consensus value v stored in a register of agreements is associated with two integers i\,i r G n 
(r ^ 1 ), which represent a set of processes pj A ,... ,pi r (with i\ < ■ ■ ■ < i r ) that have invoked a 
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(1) init step , firstid , lastid 4— 1; 

C, D , dec, newagreement 4— _L; 
agreements [tup(zd, id)] 4— input ; 

(2) begin 

(3) for r 4— 1 to (£) 

(4) lastid 4— firstid + step ; 

(5) if firstid ^id ^ lastid then 

(6) C <— agreements [tup(firstid, lastid — 1)]; 

(7) D 4— agreements [tup (firstid + 1, lastid)]; 

(8) newagreement <r- 2coalitions-consensus [r] (C, I?); 

(9) agreements [tup(/*rsf*d, lastid)] = newagreement; 

(10) end if 

(11) if lastid < n then 

(12) firstid = firstid + 1; 

(13) else if firstid > 1 then 

(14) firstid = 1; 

(15) step = step + 1; 

(16) end if 

(17) end for 

(18) dec 4— agreements [tup(l, n)]; 

(19) decide dec; 

(20) end 


Figure 8: An iterated consensus protocol using <?-2coalitions-consensus objects. 


2 coalitions-consensus object to agree on the value v, thus we can say that v is an agreement made 
by the coalition of processes represented by the pair (ii,i r )- To be able to store v in the array 
agreements , the processes use a deterministic function tup: N x N —> N, which maps bijectively 
NxN onto N. This map can be easily constructed, for example, here is a simple definition for tup 


tup (i,j) = 


i + j + 1 


+ j- 


( 5 ) 


Using all the elements described above, the processes can use the protocol of Figure [8] to 
implement consensus using (Tj 2coalitions-consensus objects, building in the process the structure 
depicted in Figure [4] from Section 4.1 From the first round and up to round n — 1, all the processes 
use their proposed input values to make new agreements in pairs, in round one, pi,P 2 invoke a 
2 coalitions-consensus shared object to agree on a common value, based on their input values; in 
round 2, p 2 and p% do the same with another 2coalitions-consensus object and their own input 
values; later, the turn comes to P 3 and p^ to do the same with another shared object and their 
input values and so on until the round number n — 1, where p n -\ and p n agree on a common value 
in the way that we have already described. All the agreements obtained in these n — 1 rounds are 
stored on the local registers 
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agreements\ [tup(l, 2 )], agreem.ents 2 [tup(l, 2 )] , agreements 2 [tup( 2 ,3)] , 

agreements 3 [tup(2, 3)] , agreements 3 [tup(3,4)] , agreements 4 [tup(3,4)], 


agreements n -1 [tup(n — 1 , n)] , agreements n [tup(n — 1 , n)\ . ( 6 ) 

In this way, the processes build the first part of the structure shown in Figure [4] of Section [4.1| 


At the end of round n — 1, in lines 14 15 each process updates the values of the local variables 
step and firstid and proceeds to round n. What happens in the next n — 2 rounds, is very similar 
to the case of the previous n — 1 rounds, but instead of making agreements in pairs, the processes 
reach new agreements in groups of three processes (see Figure [4]) invoking new 2coalitions-consensus 
shared objects and the consensus values obtained in the first n — 1 rounds and when each process 
reaches round n — 1 + n — 2 = 2n — 3, it updates the values of its local variables step and firstid 
and then the processes proceed to round 2 n — 2 . 

In general, when the processes are about to begin executing round (X)}=i n ~ j) + 1 (m < n), 
they will try to make n — (m + 1 ) new agreements in groups of size m + 2 , with the aid of the 
2 coalitions-consensus objects and the agreements they obtained from the previous n — m rounds 
and store the new consensus values in their local arrays agreements , using the tup function. When 
a process finishes round (X)j=*i' n ~ j)> the values of step and firstid are updated to repeat the 
described behavior for the next n — (m + 2 ) rounds, until the ( 2 ) round, where the last agreement 
is made and this value is the output value of all the processes. 


Now we are ready to give the full proof of Theorem 4.1 We need a series of Lemmas. 


Lemma A.l. The protocol in Figure [5] solves the consensus task using (”) g-2coalitions-consensus 
objects. 

Proof. The protocol clearly satisfies the Termination condition of the consensus task (the only loop 
is finite). We prove that it fulfills the Agreement and Validity conditions; to do this, we need some 
definitions and some intermediate results. 

With respect to the protocol of Figure [ 8 j let F = C n be elements such that 

i\ < ■ ■ ■ < i r . The set F will be called a coalition and will be denoted by F = [ii,... ,i r ]. Let pi 
a process such that i E F. We say that pi belongs to the coalition F if and only if the following 
condition is fulfilled: 

(1) agreementsi [tup(*i,i r )] = v, where v / _L is a valid input value proposed by some partici¬ 
pating process. 

We ask the following agreement property to be satisfied by F : 

(2) if pi,pj are processes which belong to F and v, v' are the values which satisfy (1) for pi and 
Pj respectively, then v = v’. 

The value v of the first condition is called the name of the coalition. The second condition says that 
all processes that belong to the same coalition must agree on the coalition’s name. For n > m ^ 0, 
let 7 (n, m) be defined by 


7 (n,m ) = 


0 


if m = 0, 


7 (n, m — 1) + n — m if m > 0. 


31 






Notice that 7 (n, m) = Y^=i n ~ * f° r m > 0 and 7(77 n — 1) = ("'). 

Lemma A.2. Let 1 ^ m ^ n — 1 and 1 ^ c ^ n — m. If Pi is executing the protocol at the beginning 


of round number r = 7 (n, m — 1 ) + c (before line 11) then stepi = m and firstidi = c. 


Proof. We prove this by induction on m. An easy analysis of the code in Figure [ 8 ] shows that 
the base case holds (when m = 1 , in the first n — 1 rounds). Assume that for m. < n — 1 , the 
lemma is true. We first prove the following claim: When pi starts executing round 7 ( 77 , m) + 1, 
stepi = m + 1 and firstidi = 1 - By the induction hypothesis, when process pi executed the 
protocol at round r' = 7 ( 77 , m) = 7 (n, m — 1 ) + c = 7 (n, m — 1 ) + (n — m ) before line 0 the local 
variables stepi and firstidi had the values of m and n — m respectively. When pi reached line 
it executed the test of the if statement, but before that, pi executed line [4] of the protocol, gather 
that, lastidi = firstidi + stepi = (n — m) + m = n; thus the test in line [TTj failed and pi executed 


lines 14 15 of the else statement (firstidi > 1 because m < n— 1) and then stepi was incremented 
by one and firstidi was set to 1 at the end of round r'. Therefore, when pi starts executing round 
7 (n, 777.) + 1, stepi = ?n + l and firstidi = 1- 

Now suppose that pi executes the protocol at the beginning of round number r = 7 ( 77 , m) + c 
where 1 ^ c ^ 77 — (m + 1). If c = 1 then by the preceding argument, stepi = 777 + 1 and firstidi = 
1 = c. Using this as a basis for an inductive argument, we can prove that for c E {1,..., 77 —( 777 + 1 )}, 
c = firstidi and stepi = 777 + 1. □ 

Lemma A. 3. Let 0 ^ 777 ^ 77 — 2. Suppose that process pi is about to begin executing the protocol 
at round r = 7 ( 77 , 777 ) + c (1 ^ c ^ 77 — ( 777 . + 1)). If c^i^c + m + 1 and pi belongs to the coalition 
P = [c,..., c + 777 ] or it belongs to the coalition Q = [c + 1,..., c + 777 + 1], then at the end of round 
r, pi belongs to the coalition [c,..., c + m + 1]. 


Proof. Let p, : be any process that begins executing round r. By Lemma | A.2 we know that stepi = 
777 + I and firstidi = c, which implies that lastidi = c + m + 1. If i E {c,..., c + m + 1}, the ifs 
test at line [5] is successful and after that what happens in lines [6|7| depends on i. If c ^ i ^ c + ?77, 
then pi is in the coalition P and if c + 1 ^ i ^ c + 777 + 1, pi is in the coalition Q , gather that, a 
valid input value is assigned to at least one of the variables C) or Di, so pi invokes in line [8] the 
(777 + 2)-2coalitions-consensus object with the input Xi = (Ci,Di ). We now pause for a moment 
to argue that the tuple J = ( x c ,..., x c+m+ \) build with the inputs of processes p c , ■ ■ ■ ,p c + m +1 is 
a valid global inp 7 . 1 t for the (m + 2)-2coalitions-consensus task. Indeed, from the hypothesis, it is 
easy to see that J satisfies the requirements (a)-(c) of the definition of coalition tuple and notice 
that r(J) — 1{J) = {c + 777 + 1} and l(J) — r{J) = {c}. 

Now back to the execution of process p^. After p t invokes the ( 777 . + 2)-2coalitions-consensus 
task, the return value of the shared object, say v, is assigned to the local variable newagree- 
menti. Finally, pi stores the contents of newagreementi in the local array agreementsi at position 
t\np{ firstidi, lastidi), where firstidi = c and lastidi = c + 777 + 1. Because of the Agreement 
condition of the 2coalitions-consensus task, every process with id in the set (c,..., c + 777 + 1} 
obtained the same value v as return value from the shared object and by the 2coalitions-Validity, 
this is a valid input value proposed by some process. Therefoi’e process pi belongs to the coalition 
[c,..., c + 777 + 1] at the end of round r. 

On the other hand, if i ^ {c,..., c + 777 + 1}, pi does not executes the body of the if statement 
(lines [6] to [ 9 ]) and it goes on to execute the if/else block at lines mm and then round r ends for 
Pi, thus it does not try to make a new coalition with other processes. □ 
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Lemma A.4. Let m E {0 ,... ,n — 2} be fixed. Suppose that process pj has executed the protocol for 
7(77, m) rounds and that there exists i E {1,... ,n — (m + 1)} such that pj belongs to the coalition 
[i,... ,i + m\ or it belongs to the coalition [i + 1 ,...,i + m + 1]. Then after pj has executed the 
protocol for n — (m + 1) more rounds, pj belongs to the coalition [z, + m + 1]. 


Proof. We apply Lemma A.3 in each round 7 ( 77 , m) + c, where c E {1, ... ,n — (m + 1)}. 


□ 


A.l Let pj be any process that executes the protocol. 


2j), process pj belongs to the coalition \j] (because of 


Now we can complete the proof of Lemma 
Just at the beginning of the first round (line 
the assignments made to the local array agreementsj in lineJTJso that if pj executes the protocol 
for 7 ( 77 , 1) = n — 1 rounds, we can conclude using Lemma A.4 that process pj belongs to some 
of the coalitions [i,i + 1] (1 ^ i fi n — 1). Starting from this fact and using induction on m, we 
can prove that for all m = 1,..., n — 1; at the end of round 7 ( 77 ., m), pj belongs to some of the 
coalitions [i,..., i + m\ (1 fi i fi n — m). In the last round (when m = n — 1), after executing the 
main for block, process pj belongs to the coalition T = [1,... , 77 ], thus when pj executes line 
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it will assign to the local variable deci a valid proposed input value and this is the value decided 
by pj at line 19 All processes decide the same value because all of them are in the coalition T. 
Therefore the protocol satisfies the Agreement and Validity conditions of the consensus task. □ 


A.2 Solving 2coalition-consensus with one safe-consensus 

We now prove that the g-2coalitions-consensus protocol presented in Section |4.1| (Figure [5| is 
correct. 

Lemma A.5. The protocol of Figure^ solves the g-2coalitions-consensus task using one snapshot 
object and one safe-consensus object. 

Proof. Let pi E {p\ ,... ,p g }', after pi writes the tuple (77, vfi) to the snapshot object SM , it invokes 
the safe-consensus object and takes a snapshot of the shared memory, pi enters into the if/else 
block at lines [6]fT0| Suppose that the test in line [6] is successful, this says that the safe-consensus 
object returned the value g to process pi. By the Safe-Validity condition of the safe-consensus 
task, either process p g invoked the shared object or at least two processes Pj,Pk invoked the safe- 
consensus object concurrently (and it could happen that j,k fig). In any case, the participating 
processes wrote their input tuples to the snapshot object SM before accessing the safe-consensus 
object, so that pi can see these values in its local variable smi, and remember that the coalitions 
tuple C consisting of all the input values of processes p\,... ,p g satisfies the properties 

1 1(C) - r(C) | = 1 and r{C) - 1(C) = {g}. 

Thus, the equation 1 1(C) — r(C)\ = 1 tell us that only one process has input tuple (x, J_) (x fi J_), 
then when pi executes line [7J it will find a local register in sra; such that smi [j] .right fi J_ and 
this value is assigned to dec,. Finally, pt executes line mi where it decides the value stored in dec* 
and this variable contains a valid input value proposed by some process. 

If the test at line [6] fails, the argument to show that decj contains a valid proposed input value 
is very similar to the previous one. This proves that the protocol satisfies the 2coalitions-Validity 
condition of the g-2coalitions-consensus task. 

The Agreement condition is satisfied because by the Agreement condition of the safe-consensus 
task, all participating processes receive the same output value from the shared object and therefore 
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all processes have the same value in the local variables vali (1 i ^ g), which means that all 
participating processes execute line [7] or all of them execute line [9| Then, for every process p r , 
dec r contains the value sm r [j r ] .right or the value sm r [j' r \ .left where j r (j' r ) depend on p r . But 
because the input pairs of the processes constitute a coalitions tuple C, they satisfy property (b) 
of the definition of coalitions tuple, which implies that sm r \j r \ .right = sm r [j q ] .right whenever 
sm r [j r ] .right and sm r \j q ] .right are non-_L (a similar statement holds for the left sides). We 
conclude that all processes assign to the variables deci (1 ^ i ^ g) the same value and thus all of 
them decide the same output value, that is, the Agreement property of the g-2coalitions-consensus 
tasks is fulfilled. The Termination property is clearly satisfied. □ 


B Appendix: Results on subgraphs of Johnson graphs 


In this appendix, we prove Theorem |B.7[ the main combinatorial result that we need to build the 
proof of the lower bound given by Theorem 4.2 We will be using some combinatorial facts of graph 
theory and finite sets. 


B.l Subgraphs of Johnson graphs 

Our graph terminology is standard, see for example [Sj, all the graphs that we use are simple graphs. 
For any set A and E C 2 A , we denote the union of all the elements of every set in E as [JE. For 
1 ^ m ^ n, the Johnson graph J n , m has as vertex set all subsets of n of cardinality m, two vertices 
61,62 are adjacent if and only if 1 61 n 62 1 = m — 1. Let V n>rn = V(J ntm ) and U C V n>m , define the 
set C(U) as 

C(U) = {c U d | c, d € U and |c 0 d\ = m — 1}. (7) 

Notice that each / 6 C{U) has size m + 1 because, if / = c U d for c, d G 17, then |c| = |d| = rn and 
it is known that |cO d\ = m — 1 44 |cU d\ = m + 1. Thus £(£/) C V n , m +i. For any v = 0, ..., n — m, 
the iterated f-operator is given by 


C(U) 


U if V = 0 , 

C(C V ~HU)) otherwise. 


( 8 ) 


As U C 
is that 


we can check that £ V {U) C V n:Tn+v . A simple, but useful property of the ("-operator 


Uc”(t/)c|Jv 


( 9 ) 


B.2 Some results on the connectivity of subgraphs of J n m 

We are ready to prove all the combinatorial results that we need. 

Lemma B.l. Let U C V n ^ m and G = G [U]. The following properties are satisfied. 

(i) If G is connected, then |(J £7| ^ m — 1 + |[/| . 

(ii) If Ui ,..., U r are connected components of G, then ((U[=i Uf) = U[=i ( (Uf). 

Proof, (i) can be proven easily using induction on \U\ and (ii) is an easy consequence of the 
definitions, thus we omit the proof. □ 
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Lemma B.2. Let U C V n , m with \U\ ^ n — m. If G [U] is connected then (J U ^ n. 

Proof. Suppose that with the given hypothesis (J U = n. As G [U] is connected, we can use part 
(i) of Lemma B.l to obtain the inequality n ^ m + \U\ — 1. But this implies that \U\ ^ n — m + 1 
and this is a contradiction. Therefore (J U 7 ^ n. □ 

The following lemma is about subgraphs of J n , 2 , it is a small result needed to give the full proof 


of our lower bound (see Lemma C.10). However, this result is far easier to prove than TheoremB.7 


Lemma B.3. Let U C V n - 2 with \U\ ^ n — 2. Then there exists a partition n = A U B such that 

(V 6 &U)(b C A or b C B). 


Proof. If (J U 7 -n, then setting A = n — {i} and B = {i} where i ^ [JU we are done. Otherwise, 
by Lemma B .2 the induced subgraph G = G[U] of J U)2 is disconnected. There exists a partition 
Vj , V 2 of V(G) = U with the property that there is no edge of G from any vertex of Vj to any 
vertex of V 2 . Let 

A = \JV i and B = \JV 2 . 

It is easy to show that n = A U B is the partition of n that we need. □ 


Lemma B.4. Let U C V n , m with \U\ > 1 and G = G[U] a connected subgraph of J n ,m ■ Then the 
graph G' = G [C(£0] connected and (J £(t/) = (J U. 

Proof. We show that G' is connected. If G contains only two vertices, then G' contains only one 
vertex and the result is immediate. So assume that \U\> 2 and take b, c G C(U). We need to show 
that there is a path from b to c. We know that b = biUb 2 and c = c\ Uc 2 with bi, Ci E U for i = 1, 2. 
As G is connected, there is a path 


vi = b 2 ,v 2 ,... ,v q = c 2 , 

and we use it to build the following path in G\ 

b = bl U vi, V\ U V 2 , ■ ■ ■ , Vq -1 U Vq,c = V q U Cl, 

thus b and c are connected in G' , so that it is a connected graph. 

Now we prove that UC(^0 = U U. By Equation ([9]), (JC(^) C (J U, so it only remains to 
prove the other inclusion. Let x E (J U, there is a vertex b E U such that x E b and as \U\ > 1 
and G is connected, there exists another vertex c E U such that b and c are adjacent in G. Then 
b U c E C(U), thus 

xE&C&UcC (JC(^)i 

gather that, (J U C (J C {U) and the equality holds. This concludes the proof. j® 

Lemma B.5. Let U C V n ^ m , G = G [U] , G' = G [£(£/)] and U be the set of connected components 
of the graph G. Then the following conditions hold: 

1. For any connected component V of G', there exists a set O C U such that V = C(U^) = 
U zeo C{Z). 
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2. If V, V' are two different connected components of G' and 0,0' CU are the sets which fulfill 
property 1 for V and V' respectively, then O n O' = 0 . 

Proof. Part 2 is clearly true, so we only need to prove part 1. Define the graph PL = (V(PL), E(fH )) 
as follows: 

VCH)=U; 

Two vertices Z, Z' form an edge in E(PL ) if and only if there exist b, c £ Z and d,e £ Z' such 
that 


— |6 n c| = m — 1 and \d n e| = m — 1 

- | (b U c) fl (d U e) | ^ m. 


Roughly speaking, PL describes for two connected components Z,Z' of G, whether ((Z),((Z') he 
in the same connected component of G' or not. Let V be a connected component of G', if b £ V, 
then b = b\ U 62 , where b\, 62 are in some connected component Zb C U of G. In PL, there exists a 
component O such that Zb £ O. By Lemma B.4, G \((Zb)\ is connected and b £ ((Zb) D V, so it is 
clear that ((Zb) C V. Suppose that Z' £ O with Z' f Zb and these components form an edge in 
PL. This means that G [((Zb)] and G [((Z')\ are joined by at least one edge in G', thus every vertex 
of ((Z') is connected with every vertex of ((Zb), and as ((Zb) C V , ((Zb) U ((Z') C V. We can 
continue this process with every element of the set O — {Zb, Z'} to show that 


C(U°)= U C{Z)CV. 


ZeO 


(The hrst equality comes from part (ii) of Lemma B.l). We prove the other inclusion, if V = {b}, 
we are done. Otherwise, let c £ V — {&}, if c £ ((Zb), then c £ (((JO). In case that c ^ ((Zb), 
there must exists some connected component Z c of G such that c £ ((Z c ) and Z c / Zb- In G', we 
can hnd a path b = v\,... , v q = c where Vi £ V for i = 1,. .., q. The set QcW defined as 


Q = {X £ U | (3j)(l and vj £ CPO)}, 


can be seen to have the property that every pair of vertices X, X' £ Q are connected by a path in 
PL. Since Zb, Z c £ Q, they are connected in PL and as Zb £ O, then Z c £ O, gather that, c £ C(U £*)• 
Therefore V C ^((J O) and the equality V = UzeO C(Z) holds. This proves part 1 and finishes the 
proof. □ 

Lemma B.6. Let U C V n ^ m and U be the set of connected components of G[U], Then for all 
s £ {0,..., n — m} and G s = G [C S (E/)], the following conditions are satisfied. 

HI For every connected component V of the graph G s , there exists a set O CU such that 


|^J V\ ^ m — 1 + ^ | Z 

zeo 


( 10 ) 


H2 IfV, V' are two different connected components of G s and 0,0' CU are the sets which make 
true the inequality given in (10) for V and V' respectively, then O (1 O' = 0. 
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we use 


Proof. We prove the lemma by using induction on s. For the base case s = 0, G° = G [U], 


Lemma B.l and we are done. Suppose that for 0 ^ s < n — m, HI and H2 are true. We prove the 
case s + 1, let W be a connected component of the graph G s+1 . By part 1 of Lemma B.5, we know 
that there is a unique set Q of connected components of G s such that 


w = U C(Q) 


QeQ 


and because C(Q) 7^ 0, \Q\ > 1, so that by Lemma B.4[ |JC(Q) = U Q f° r all Q £ Q, thus it is 
true that 


U w = U( U <(<?)) 

QeQ 

= UdJdo)) 

QeQ 

= U(U«)- 

QeQ 

By the induction hypothesis, |(JQ| ^ m — 1 + Yhz&Oq 1-^1 > w bere Oq C U for all Q E Q and when 
Q ^ R, Oq n Or = 0. With a simple induction on \ Q\, it is rather forward to show that 

\\Jw\ <m-l + ^2\Z\, 

zeo 

where O = Uqsq Oq, gather that, property HI is fulfilled. We now show that condition H2 holds. 
If W' is another connected component of G s+1 , then applying the above procedure to W' yields 
W = U Se5 C(S), \JW' = \J S( ;s(US) and |(J W'\ < m - 1 + £ Xe0 ,|X|, with 0’ = \J SeS O s . By 
2 of Lemma [B. 5 [ Qn5 = 0, so that if Q E Q and S E S, then Q / S and the induction hypothesis 
tell us that Oq n Os = 0, thus 

ono' = (|J o Q )n(U o s ) 

QeQ SeS 

U (°« n °h 

(Q,S)eQxS 

= 0 , 


and property H2 is satisfied, so that by induction we obtain the result. 


© 


We can now prove the main result of the combinatorial part of the proof of Theorem 4.2 
Theorem B.7. Let U C V n . m such that \U\ ^ n — m. Then C n ~ m (U) = 0. 

Proof. For a contradiction, suppose that ( n ~ m (U) ^ 0, then G [C n ~ m (U)\ is the graph J n ^ n and 
contains the unique connected component C = {n}, thus by Lemma B.6 for some set O of connected 
components of G[U], 

» = IU C I ^ m — 1 + E \Z\ ^ m — 1 + |t/|, 

z&o 

and we conclude that \U\ ^ n — m + 1, a contradiction. So that 
Therefore ) has no elements. 


1 {U) ^ 0 is impossible. 

□ 
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C Appendix: The proofs of Section 4.2 


In this last appendix, we give the required elements to prove Theorem |4.2| We prove Lemmas 


C.8 and C.10 these results give us information about the structure of WOR protocols with safe- 


consensus objects and the combinatorial interactions that exists between the sets of processes which 
cannot distinguish between global states of a path and the boxes that represent safe-consensus 
objects invoked by the processes. For all this, we need to apply Lemma |B . 3| and Theorem B.7 We 
will be using definitions and terminology given in Sections MEH and Appendix [Bj 

Before giving the formal proof of our results, we need some technical definitions which will be 
useful to prove our results. Let A be a protocol with safe-consensus objects for n-processes, X C n, 
R a state of some round r > 0 and b E Inv(R). We say that R is a ladder state for X with step b, 
if R = S ■ £(Ci,..., C u , B ) (u ^ 0), where 5 is a reachable state in A and 


• X = (U“ Cj) U B; 

• for j = 1,..., u, 0 ^ \Cj\ ^ 2; 

• (U]C j )nb = 0; 

• B = bn X. 


The following definition is given for convenience. For each box bi and W C n, let the set Wu\ be 
defined as 


w (i) = wnbi. 


(ii) 


C.l The structure of WOR protocols with safe-consensus objects 

We are ready to give the structural results about WOR protocols with safe-consensus objects. 

Lemma C.l. Let A be a WOR protocol for n ^ 2 processes with safe-consensus objects and S a 
reachable state in A. Then for any two round schedules 7Ti,7T2, Inv(5 • 7Ti) = Inv(5 • 7^). 

Proof. In Figure [lj notice that process pi executes the deterministic function h with the local state 
it has from the previous round (except from the round counter r), so that if r is the round number 
of S and pi starts executing the protocol A in round r + 1 with the local state it had in S , the 
input to the function h is given by the tuple (r + 1, i, sms, vals), where sms, vals depend only on 
S. Thus in both successor states S ■ tti and S ■ 712 , Pi feeds the same input to h, gather that 

Inv(S • 7Ti) = Inv(S • tt - 2 ) 


and the lemma is true. 


S3 


Lemma C.2. Let n ^ 2, 0 / X C n, A a WOR protocol with safe-consensus objects, S a state 
that is reachable in A in some round r ^ 0 and bj G Inv(S'x), where Sx = S ■ £ A). Then there 
exists a state L, such that L is a ladder state for X with step bj, such that Sx and L are connected 
in round r + 1 with a path of states p with degp ^ n — 2. 


Proof. Let Inv(Sx’) = {b \,..., b q } (q ^ 1). By Lemma C.l for any one-round successor state Q 


of S, Inv(Q) = Inv(,SV) and we can write I11V5 instead of Inv(S'x). Without loss, assume that 
b\ = bj. If q = 1, then b\ = n and the result is immediate, because Sx is a ladder state for X 
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with step n. So that we suppose that q > 1. Partition X as X = X^ U • • • U X^ and build the 
following sequence of connected states 


Sx U ~ (1) S-£(A 2 (1),A-A 2 (1)) 

"■~ (2) 5 • £(A 2 (1), A 2 (2), A - (A 2 (l) U A 2 (2))) 

n—A2(3) n—A 2 (c« 2 ) 

S • £(A 2 (1), A 2 (2),..., A 2 (a 2 ),X - X (2) ), (12) 

where X( 2 ) = USi-^- 2 (z) is a partition of A'( 2 ) such that |A 2 (j)| = 1 for j = 2, ...,a 2 . The set 
A 2 (1) has cardinality given by 


|A 2 (i)| 


2 if|X (2) |>l, 

|X( 2 )| otherwise, 


and we choose the safe-consensus value of every box in the set Invg to be the same in each state of 
the previous sequence. This can be done because of the way we partition X ( 2 \, the election of the 
elements of the set A 2 (l) and the properties of the safe-consensus task (Safe-Validity). We execute 
similar steps with box & 3 , so that we obtain the path 


S ■ £(A 2 (1),..., A 2 (a 2 ), A — V (2) ) 
s;-A3(i) 


n-A 3 (2) 


S ■ £(A 2 (1),..., A 2 (a 2 ), A 3 (l), X - (X^ 2 ) u A 3 (l))) 

S • £(A 2 (1),..., A 2 (a 2 ), A 3 (l), A 3 (2), X — (A( 2 ) U A 3 (l) U A 3 (2))) 

n-A3(3) n—A 3 (o 3 ) 


s ■ £(A 2 (1),..., A 2 (a 2 ), A 3 (l),..., A 3 (a 3 ), A - (A (2 ) U A( 3 ))), (13) 

where the A 3 (i)’s and a 3 depend on 6 3 and A( 3 ), just in the same way the sets A 2 (j) and a 2 depend 
on 6 2 and A( 2 \ and each box has safe-consensus value equal to the value it has in the sequence of 
©• We can repeat the very same steps for b^,...,b q to obtain the sequence 


5 • £(A 2 (1), • • •, A 3 (a 3 ), V - (A (2) U A (3) )) 

H_ ~ (1) 5 • £(A 2 (1),..., A 3 (a 3 ), A 4 (l), V - (A (2) U A (3) U A 4 (l))) 

n—A 4(2) n— Ag(l) 

rs_/ . . . 

5 • £(A 2 (1),..., A,(l), X - (Aq(l) U \J~l X (i) )) 

~ ••• ~ <5 • £(A 2 (1),..., A q (a q ), V (1 )). (14) 


It is easy to prove that L = S ■ £(A 2 (1),..., A q (a q ), A( 4 y) is a ladder state for X with step b\ and 
that each of the sequences of equations (12), (13) and (14) has indistinguishability degree no less 
that n — 2. Combining all these sequences, we obtain a new path 


p: Sx ~ • • • ~ L 


with degp ^ n — 2. 


M 
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Lemma C.3. Let n ^ 2 ,X,Y C n, A a WOR protocol with safe-consensus objects and S an 
state that is reachable in A in some round r ^ 0. Assume also that bj is a box representing a 
safe-consensus object invoked by some processes such that bj 6 Inv(Li) = Inv(L 2 ), where L\ = 
S ..., C u , X(j)) is a ladder state for X with step bj and L 2 = S 1 ,..., C u , YL)) is a ladder 
state for (X — ) U with step bj. Finally, suppose that ifbj = n, scval(6j, L\) = scval(6j, L 2 ). 

Then L\ and L 2 are connected in round r + 1 with a C-regular path of states p that satisfies the 
following properties: 

i) If scval(7jj. L\) = scval(6j, L 2 ) then degp ^ n — 2. 

ii) If scval(6j, L\) A scval(6j, L 2 ) then degp ^ n — \bj\ and n — bj € iSets(p). 

Proof. Let n be the disjoint union n = X~ U (X n Y) U Y~ U W, where 

X- = X - Y; 

Y~ = Y - X; 

W = n - (X- U (X n Y) U Y~). 

What we need to do to go from L\ to L 2 is to “interchange” Xy) with Y^y We first construct a 
sequence of connected states pi given by 

S-aCi,...,C u ,X {j) ,Y-UW) 

s■ aci ,• • .,c u ,Aj(i),x {j) - Aj(i),y- u W) 

R '^' (2) S-tiCu..., C u , Aj(l),Aj(2),X u) - (Aj(l) U Aj(2)), Y~ U W) 

””~ (3) • • • 5 • £(Ci,... ,C U , Aj(l), A,(2),..., A j{aj),Y~ U W) 

■ r ck ■ 1 

~ *5 • £(<?!, • • • ,C u ,Aj(l),Aj(2),.. .,Aj(cxj - l),Aj(aj) UY~UW) 

n—An(otj — l) n-Aj(l) _ , _ _ 

~ ••• ~ J 5'((c lr ..,c Bl x (j) uruf), 


where the following properties hold: 

• X(j\ = U-=, A j(i) is a partition of Xq) such that |Aj(Z)| = 1 for l = 2,..., ay, 

• |A(1)| = 2 if |X(j)| > 1 and |Aj(l)| = |Xq-)| otherwise; 

• Pi is a C-regular sequence (Lemma |C.1[ ) with deg pi ^ n — 2; 

• the safe-consensus value of every box bi is the same in each state of pi. This can be archived 
by a proper election of elements of the set Aj(l) and the Safe-Validity property of the safe- 
consensus task. 
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Now, as Xq-) 111" = Y(j) U X,.< U (Y — Y^), we can write the state S- £(Ci,..., C u , U7 U W) 
as S ■ £(Ci,..., C u , U XL, U (Y~ — YX ) U W). We need to build a second path p 2 as follows: 


5 • aci, ...,c u , Y U) u x~ u (y- - Y~) U W) 

s■ acu...,c u , %(i), (Y {j) - %(i)) uX- u (y- - Y-) u w) 

n—flj (2) n— Clj(ej — 1) 

rs_/ • • • 

5 • £(Ci,..., c u , %(1),..., sijiej) u X- u (y- - y ( T } ) u w) 

S • aci,...,c u ,Qj( 1 ),...,fyfo),x- U(y- -y ( T } )u w) 

fi—Qj (e.j—1) 
rs-/ 


5 • t(c u • • •, c„, ^(l),..., -1) u fyfo), x ( l } u (y- - y r 70 u w) 




n 2 )... - 5. e(Cl) ...,c u ,y y) ,X- u (y- - yjj) u w). 


Let L 2 be the last state of the previous sequence. The next assertions are true for the path p 2 : 

• The sets f ij(i) and Cj are defined for Y^\ and bj in the same way as the A j(i) and aj are 
defined for X^ and bj ; 

• The sequence p 2 is C-regular (Lemma C.l| ); 

• The safe-consensus value of every box c A bj is the same in every element of States(p 2 ); 

• scval(6j,<2) = scval(6j,P) for all Q,P G States(p 2 ) — {ii}, where R = S ■ £(Ci, .. ., C u , 
Y u) UXj ) U(Y--Yj ) )UWy, 

• the set Z is defined by 


Z = 


bj 

%( 1 ) 


if scval(6j, L\) / scval(frj, L 2 ) 
otherwise; 


Notice that by the last assertion, we can deduce that degp 2 ^ n — \bj\ and n — bj G iSets(p 2 ) if 
scval(6j, L\) 7 scval(6j, L 2 ) and degp 2 ^ n — 2 when scval(6j, L\) = scval(6j, L 2 ). Thus we can use 
pi and p 2 to obtain a C-regular sequence p which fulfills properties i)-ii) of the lemma and that 
concludes the proof. □ 

Lemma C.4. Let n ^ 2, X, Y C n, A a WOR protocol with safe-consensus objects, S a state that 

is reachable in A in some round r ^ 0 and bj a box representing a safe-consensus object invoked 

by some processes in round r + 1 such that bj G Inv(Qi) = Inv(<32)> where Q\ = S ■ £(X) and 
Q 2 = S ■ f{Y(j\ U (X — Xtj\)). Assume also that if bj = n, scval(6j, Q\) = scval(6j, Q 2 ). Then the 
states Qi and Q 2 are connected in round r + 1 with a C-regular path of states p that satisfies the 
following properties: 

a) If scval(6j, Q\) = scval(6j, Q 2 ) then degp ^ n — 2. 

b) If scval(6j, Qi) / scval(6j, Q 2 ) then degp ^ n — \bj\ and n — bj G iSets(p). 
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Proof. By Lemma 


C.2 


Qx U) = S 
Qx, 


C.3 


O') 


can 


The state Q i can be connected with a state of the form 
f(B i,..., B S ,X^) with a C-regular path qi such that deg qi ^ n — 2. Using Lemma 
be connected with Qy u) = ..., B s , Y^) by means of a C-regular sequence qo . 

Qy U) such that q 2 satisfies properties i) and ii) of that Lemma. And we can apply Lemma 
connect Qy (: i] with Q 2 with the C-regular path q ,3 which has indistinguishability degree no less that 
n — 2. Therefore the sequence of connected states build by first gluing together the sequences qi 
and q 2 , followed by q 3 , is a C-regular sequence q such that the requirements a)-b) are satisfied. © 


C.2 


to 


To be able to state and prove the last result of this section, we need a definition that will be 
needed for the rest of the appendix. Let Qi,Q 2 be two reachable states in round r of an iterated 
protocol A for n processes with safe-consensus objects. The set Q 2 ) is defined as 


T> r A (Qi, Q 2 ) = {be Tqjn) | b £ Inv(Qi) Cl Inv(Q 2 ) and scval( 6 , Q 1 ) A scval( 6 , Q 2 )}. 


Theorem C.5. Let n A 2 and X,Y C n, A a WOR protocol with safe-consensus objects, S a 
reachable state of A in some round r A 0 and let Q\ = S ■ f(X) and Q 2 = S ■ £(T) be such that 
n ® r A l {Qi, Q 2 )- Then Q\ and Q 2 are connected in round r + 1 with a C-regular path of states p 
such that 

(A) IfTt^^Qi, Q 2 ) = 0, then degp An- 2. 

(B) If the set 'S r A 1 {Qi, Q 2 ) is not empty, then 

1. degp ^ min {n - \b\} b ^r+i {Qi Q2) ; 

2. for every Z £ iSets(p) with \Z\ < n — 2, there exists an unique b £ Q 2 ) such 

that Z = n — b. 


Proof. By Lemma C.l T) r A (Pi,P 2 ) = {b £ T_ 4 (n) | b £ Invs and scval( 6 , Pi) A scval(fo, T- 2 )}, where 
Pi is a one-round successor state of S and Invs = Inv(P^), l = 1,2. Let Invs = { 61 ,..., b q }. By 
Lemma C.4 we can connect the state Q\ with R\ = S ■ U (X — ^f(i))) using a C-regular path 

Pi: Q 1 r^j . . . R\ such that 


(Ai) If 61 ^ D^ + 1 (Qi,i?i), then degpi An-2. 

( B \) If b\ £ T) r Jf l (Qi,Ri), then degpi A n — \b±\ and n — b± £ iSets(pi). 


Notice that if there is a set Z £ iSets(pi) with size strictly less that n — 2, then it must be true that 
b\ £ i?i), because if b\ ^ R\), the by (Ai), \Z\ A n — 2 and this is impossible. 

Thus the conclusion of property (B 1 ) holds for pi, which means that n — b\ £ iSets(pi). Examining 
the proof of Lemma C.4 we can convince ourselves that every W £ iSets(pi) such that W An — b\ 
has cardinality at least n — 2, gather that, Z = n — b\. 

to the states R\ and R 2 = S ■ £(^( 1 ) U T( 2 ) U {X — (©( 1 ) Ul( 2 )))), we find a 
R 2 such that p 2 and 62 enjoy the same properties which pi and 

~ R 2 


Applying Lemma 


C.4 


C-regular sequence p 2 : Ri ~ • • 
b\ have. We can combine the paths pi and p2 to obtain a C-regular sequence P12: Qi ~ 
from Q 1 to R 2 satisfying the properties 


(A 2 ) If { 61 , 62 } n T) r Jj 1 (Qi,R 2 ) = 0 , then degpi 2 An - 2 . 
(B 2 ) If { 61 , 62 } Cl R 2 ) is not empty, then 


42 









1 . degpi 2 ^ mm{n-\b\} be{bub2}n ^r+i {QuR2 y, 

2. for every Z £ iSets(pi 2 ) with \Z\ < n — 2, there exists an unique b £ { 61 , 62 } Cl 
2)^ fl ((5i, R 2 ) such that Z = n — b. 

We can repeat this process for all s £ {1,, q}. In general, if R s = !”(,)) U {X — (|J* AW))), 

we can construct a C-regular path 

Pis : Qi ~ • • • ~ Rs, 


with the properties 


(A s ) If {&!,... , 6 S } PI D^ + 1 (Q i,R s ) = then degp is ^ n - 2 . 
(B s ) If { 61 ,..., b s } n S^ 4 _ 1 (( 3 i, R s ) is not empty, then 


1 . degp ls ^ min{n- |6|} fte{feii bs}n ^+i (Qi A) ; 

2. for every Z £ iSets(pi s ) with \Z\ < n — 2, there exists an unique b £ { b\ ,... , 6 S } n 
®^ 4 fl (Qi) Rs) such that Z = n — b. 

As R q = S • C((U i Y(i )) U (X — ((JJ Aqq))) = S • £(T) = Q 2 , the sequence pi 9 is the desired C-regular 
path from Q\ to Q 2 , fulfilling conditions (A) and (B) (because { 61 ,..., b q } Cl ©(^(Qi, R q ) = 
I11V5 n 2)^ t_ 1 (Qi, Q 2 ) = ^> r ^ l {Qi, Qi))- The result follows. □ 


C.2 The main structural results 


In this section, we prove Lemma C .8 
A, consider the set 


For a given path s of connected states of an iterated protocol 


Pa( 5 ) = {b £ r^(n) | (3X, Y £ iSets(s))(|A n b\ = 1 and \Y Cl b\ = 1)}, 


and if m £ n, let /3^(s; m) = /3^(s) Cl r_ 4 (n, m). Notice that /3yi(s; m) C V n>m 


(see Section B.l). 


Lemma C. 6 . Let n ^ 3 and l^v^s^n — 2 be fixed. Suppose that A is a WOR protocol with 
safe-consensus objects and there exists a sequence 


s: S 0 - 1 ■■■%S q (O 1), 


of connected states of round r ^ 0 such that 
Ai degs ^ v. 

A 2 For every X t with v ^ \Xi\ < s, there exists bi £ r^(n, n — |Aj|) such that Xi = n — bi 
A 3 n fi{s). 

Then in round r + 1 there exists a sequence 


q: Qo ~ • • • ~ Qu, 

of connected successor states of all the Sj, such that the following statements hold: 
\P 1 If fiy 1 ( 5 ; n — v + 1) = 0, then deg q > v. 
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'I '2 If Pa{ 5 \ n — v + 1 ) is not empty, then deg q ^ v — 1 . 

+3 For every Z G iSets(q) with \Z\ = v — 1, there exist X,X' G iSets(s) and a unique b G 

Pa( 5 'i n — v + 1) such that Z = n — b = X n X' and b = ci U C 2 , Ck G T_ 4 (n, n — v). 

T4 For every Z G iSets(q) with v ^ \Z\ < s, there exists a unique b G T^(n,n — \Z\) such that 

Z = n — b. 

'I'S Pa( q; n-l + 1 ) c C(/5^(s; n-l)) for v < s. 


Proof. In order to find the path q that has the properties Ti-Ufs, first we need to define a set of 
states of round r + 1 of A, called <h^ 1 (s), which we will use to construct the path q. The key 
ingredient of T^ 1 (s) is the safe-consensus values of the boxes used in each member of <h^ 1 (s). 
Define the set of states <h^ fl (s) as 

$^ fl (s) = {R | R = S ■ £{X) and (S,X) G States(s) X iSets(s)}. 

Each element of < h^ 1 (s) is a state in round r + 1 of A which is obtained when all the processes with 
ids in some set X G iSets(s) execute concurrently the operations of A, followed by all processes 
with ids in n — X. The safe-consensus values of each box for the states of T^ 1 (s) in round r + 1 
are defined by using the following rules: Let b be any box such that b £ f3(s). 


• If \X n b\ 7^ 1 for every X G iSets(s), then we claim that we can choose any element j such 
that j is the safe-consensus value of b in every state R G <h^j fl (s) such that b G Inv(P). 


• If there exists exactly one set X G iSets(s) such that X n b = {x}, then b has x as its 
safe-consensus value in every state Q G < h^ 1 (s) with b G Inv(Q). 


We establish rules to define the safe-consensus values of every element of the set /^(s), using the 
order on the set iSets(s) induced by the path s, when we traverse s from So to S q . So that iSets(s) 
is ordered as 

Xi,...,X q . (15) 

For each b G Pa(s), suppose that X- L ,Xi +Zl ,..., X l+Zk , (l^z<z + 2 :i<z + 22 <---<i + 2 :fc^ 
q\Zj > 0 and k ^ 1) is the (ordered) subset of iSets(s) of all X G iSets(s) with the property 
\X n b\ = 1. Take the set X t . If Xi G Xi n b , then Xi is the safe-consensus value of b for all the 
elements of #(^ 1 (5) of the form Pj = S • £,(Xj) where b G Inv(Pj) and 1 ^ j ^ i + z\ — 1. Next, in 
all states R u G d > ( 4 + 1 (s) such that R u = S ■ £(X U ) with b G Inv(i? u ) and i + z\ ^ u ^ — 1, 

b has safe-consensus value equal to Xi +Zl G X- l+Zl n b. In general, in all states T v G $(^ 1 (s) of the 
form T v = S ■ £(X V ) where b G Inv(T„) and i + zi^v^i + zi + \ — 1 and 1 ^ l ^ k — 1, b has 
safe-consensus value equal to x z+Zl G X,- l+Zl n b. Finally, in each state L w = S ■ !;(X W ) G d>^ +1 (s) 
with b G Inv(L ?JJ ) and i + Zk ^ w ^ q, b has safe-consensus value equal to Xi +Zk G Xi +Zk n b. 

Using the Safe-Validity property of the safe-consensus task, it is an easy (but long) routine task 
to show that we can find states of A in round r + 1 which have the form of the states given in 
<h( 4 +1 (s) and with the desired safe-consensus values for every box. 

We are ready to build the sequence q of the Lemmaj^] We use induction on q ^ 1. For the 
base case when q = 1, we have that s: Sq ~ S 1 , with |Vi| ^ v. Here we easily build the sequence 


2 Notice that the order given to < h^ 1 (s) in equation 
appear in the path q. 


15 


is the precise order in which the states of this set will 
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So ■ £(Ai) 5i • £(Ai) which clearly satisfies properties vUi-lEv Assume that for 1 ^ w < q we 
have a sequence 

q 7 : Qo ~ • • • ~ Qi (i ^ 1), 

Satisfying conditions ^ 1-^5 and such that Qo = So ■ £(Ai), Qi = S w • £(X W ). We now connect the 


state Qi with Q = S^+i • £(A™ + i). By Theorem C.5| there is a C-regular sequence 


0: Qi 


Q' 


such that Q' = S w ■ £(X w +i) and t ),Qi and Q' satisfy conditions (A)-(B) of that lemma. Clearly 
Q') C /? 4 (s), because the only boxes used by A in the states Qi and Q' with different safe- 
consensus value, are the boxes which intersect two different sets X, X' E iSets(s) in one element. 


X 

Joining the sequence q' with 0 , followed by the small path t: Q' A Q (of degree at least v), we 


obtain a new sequence q: Qo 


Q. We now need to show that q satisfies properties ^ 1 -^ 5 . 


T, 


Notice that every box in /3(s) has size no bigger that n — v + 1. Suppose that /3 4 ( 5 ; n — v + 1) = 
0. In particular, this implies that ^^(jQuQ') n T^(n,n — v + 1) = 0. If it happens that 


{Qh Q') is void, then as condition (A) of Theorem C.5 holds for 0 , degd ^ v. But if 


'A , _ 

Q'a (Qz> Q') / 0 we have that | 6 | ^ n — v for all b E Q'), thus by part 1 . of property 


(B) of Theorem C.5 


^ v. 


deg 0 ^ min{n - \b\} beV r+i {QhQt) 

By the induction, hypothesis degq' ^ v and also degt ^ v, so that degq ^ v. 


'f '2 If Pa{ s ‘i n—v+l) A 0 > then either deg q' ^ v—1 (by the induction hypothesis) or deg 0 ^ v—\. 


This last assertion is true, because by (B) of Theorem C.5, we have that degd ^ min{n — 
\b\}be'D r +\Qi,Q l ) ^ v ~ 1 - Gather that, degq ^ v - 1 . 

T 3 We remark first that iSets(q) = iSets(q') U iSets(d) U iSets(I). If we are given Z E iSets(q) 
such that \Z\ = v — 1, then Z E iSets(q') or Z E iSets(d). When Z E iSets(q'), we use our 
induction hypothesis to show that Z = Y n Y 1 = n — d for some Y, Y' E iSets(s) and unique 
d E /3^(5;n — v + 1) such that d = d! U d", d! , d" E T^(n,n — v). On the other hand, if 
Z E iSets(d), it must be true that fl (Q/,Q / ) A 0 (if not, then degd ^ n — 2 by property 
(A) of Theorem C.5 for d and this cont radicts the size of Z). As v — 1 < n — 2, we can apply 
part 2 of condition (B) of Theorem C.5 to deduce that Z = n—b for a unique b E (Qi , Q'). 

Because \Z\ = v — 1 , | 6 | = n — v + 1 . Now, b E Q^iQi, Q') C Pa( 5 )i gather that, there 
exists A, A' E iSets(s) such that \X 0 b\ = 1 and \X' 0 b\ = 1 and this clearly implies that 
| A| = | X'\ = v and n — b = A n A', that is, 

Z = n-b = AC A', 

and finally, we apply A 2 of the sequence s to A, A' to find two unique boxes c, d E T_ 4 (n, n— v) 
with A = n — c and X' = n — d , so that 

n — b = A n X' = (n — c) n (n — c') = n — (c U c'), 
then b = cU d and condition T 3 is satisfied by q. 

T 4 The sequence q fulfills this property because of the induction hypothesis on q', condition A 2 


for s and (B) of Theorem C.5 for d. 
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^5 Let l E {v, ..., s}. This property is satisfied by q if /3 a (q; n — l + 1) = 0. Suppose that c E 
/3a (c y,n — l + l), there exist X,Y E iSets(q) such that |Xflc| = |Tflc| = 1. Then |X| = |T| = l, 
so that we use property ^3 (or T 4 ) on X, Y to find two boxes bx, by £ /3a ( s ', n ~ /) such that 
X = n — bx and Y = n — by■ Also, XC\Y = n — c, thus n-c = Iflh = (n — bx) fl (n — by) = 
n — (bx U by). Therefore c = bx U by and this says that c E £ (/3a (s; n — l)). Condition T 5 is 
fulfilled by q. 


We have shown with induction that we can build the path q from the sequence s, no matter how 
many states s has. This proves the Lemma. □ 


The following corollary is a weaker version of Lenuna C .6 
consequence of that result. 


and it can be proven mostly as a 


Corollary C.7. Let n ^ 3 and l^s^n — 2 be fixed. Suppose that A is a WOR protocol with 
safe-consensus objects and there exists a sequence 

s: So - 1 ••• % S q (q> 1), 

of connected states of round r 0 such that deg 5 ^ s and n ^ £U(s). Then in round r + 1 there 
exists a sequence 

q: Qo ~ • • • ~ Qu, 

such that the following statements hold: 

'Ll U £U(s; n — s + 1) = 0, then deg q s. 

'f '2 If /3a (s; n — s + 1 ) is not empty, then deg qfis — 1. 

T 3 For every Z E iSets(q) with \Z\ = s — 1, there exist X,X' E iSets(s) and a unique b E 
/3a (s; n — s + 1) such that Z = n — b = Xn X'. 

^5 - s + 2) C £(/3a(5;?i - s + 1)). 


We have gathered all the required elements to prove one of the key ingredient of the full proof 
it is the following 


of Theorem 4.2 


Lemma C. 8 . Let n 3 and 3 £ m £ n 6 e fixed. Suppose that A is a WOR protocol with safe- 
consensus objects such that ■fi n — m. If S r ,Q r are two reachable states in A for some 

round r 0, connected with a sequence q : S r ~ • • • ~ Q r such that deg q n — m + 1, then for all 
ufiO, there exist successor states S r+u ,Q r+u of S r and Q r respectively, in round r + u of A, such 
that S r+U and Q r+U are connected. 


Proof. Let A be a protocol with the given hypothesis, set qo = q and m = n — s + 1. Because 
3 ^ m ^ n, sE{l,...,fi — 2}. Using the sequence qo and applying Corollary C.7, we build a path 
qi : S r+1 ~ • • • ~ Q r+1 , connecting the successor states S r+1 , Q r+1 of S r and Q r respectively, such 
that 


^ 1,1 If /3a(4o;h — s + 1 ) = 0, then degqi > s — 1. 

'Ll ,2 If /3 a (q 0 ; n — s + 1) is not empty, then deg qi ^ s — 1. 
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'3/ 1 ,3 For every Z E iSets(qi) with \Z\ = s — 1, there exist X,X' E iSets(qo) and a unique b E 
/$4(qo; n — s + 1) such that Z = n — b = Xn X'. 


® 1,5 /3^i(qi; n - s + 2) C C(/3^(qo; n - s + 1)). 


Starting from qi and using induction together with Lemma C.6, we can prove that for each u E 
{1,..., s — 1}, there exist successor states S r+U , Q r+U of the states S r and Q r respectively, and a 
sequence 

q u : S r+U ~ • • • ~ Q r+U , 

satisfying the properties: 


If /3^(q u _i;n - s + u) = 0, then degq u > s - u. 
f Ui 2 If /I^(q«-i; n — s + it) is not empty, then deg q u ^ s — u. 

4/^3 For every Z E iSets(q u ) with \Z\ = s — 1, there exist X,X' E iSets(q«_i) and a unique 
b E q u _i; n — s + 1) such that Z = n — b = Xn X'. 


f U] 4 For every Z E iSets(q, u ) with s — u ^ |Z| < s — 1, there exist X,X’ E iSets(q u _i) and a unique 
b E /3^(q u _i; n— \ Z\) such that Z = n — b = XC\X' and b = C 1 UC 2 , c& E /3^(q u _i; n — |Z| — 1). 


^u,5 /5^(q«; n - l + 1) C C(/3^(q u -i; n - I)) for s - u < Z < s. 

When u = s — 1, we obtain a sequence q s _i: g r + s_1 Q r+S 1 that connects the states 

gr+s-i anc j Qr+S-I^ SUC J 1 that 

^- 1,1 If Pa{<\s- 2 ] n - 1 ) = 0, then deg q s _i > 1 . 

1,2 If /S^t(qs- 2 ;n — 1) is not empty, then deg q, s _i ^ 1. 

* a _i )3 For every Z E iSets(q s _i) with \Z\ = s — 1, there exist X,X r E iSets(q s _ 2 ) and a 
unique b E /3^(q s -2',n — s + 1) such that Z = n — b = X n X'. 

^ s _i, 4 For every Z E iSets(q s _i) with 1 ^ \Z\ < s — 1, there exist X,X' E iSets(q s _ 2 ) 
and a unique b E ^(q s _ 2 ;n — \Z\) such that Z = n — b = XnX' and b = c\ U C 2 , Ck E 

/?^(q s - 2 ;n - \z\ - l). 


’Fs—1,5 pA{<\s-i;n- l + 1) C C(/3^(q s _ 2 ;n - l)) for 1 < l < s. 

Our final goal is to show that for all v ^ s — 1, we can connect in each round r + v of A, successor 
states of S r and Q r . We first claim that for any w = 0,..., s — 1 and z ^ 0, 


n - s + 1)) C C 2 (F^(n, n - s + 1)), 


(this is true because £ preserves C) and combining this fact with the properties 'I r „.5 and induction, 
we can show that for 1 ^ l < s 


#A(q s -i; n - l + 1) C ( s 1 (Pa(<\i-i', n - s + l))C( s Z (r^(n, n- s + 1)). (16) 


And because 
to check that 


|F^(n, n — s + 1)| = VA(n,n — s + 1) ^ s- 
C s ^ 1 (F_ 4 (n, n — s + 1)) = 0, implying that 


1 and m = n — s + 1, we use Theorem B.7 


/3^(q s _i;n) = 0. 
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With all this data, Lemma C .6 and an easy inductive argument (starting at the base case v = s —1), 
we can find for all v ^ s — 1 , states S r+V , Q r+V of round r + v of A, which are successor states of 
S r and Q r respectively and connected with a sequence q„ such that 


^,1 de g cb ^ 1- 

'3/ 2 For every Z G iSets(q„) with \Z\ = s — 1, there exist X,X' G iSets(q„_i) and a unique 

b G /3^(q„_i; n — s + 1) such that Z = n — b = X n X’. 

'3 /3 For every Z G iSets(q l) ) with 1 ^ \Z\ < s — 1, there exist X,X' G iSets(q„_i) and a unique 

b G q„_i; n — \Z\) such that Z = n — b = XnX' and b = c\ UC 2 , c*, G /3^(q„_i; n — |Z| — 1). 

4C 4 Pa((\v\ n -1 + 1) c n - s + 1)) for 1 < l < S. 


3t is precisely these four properties of the path q„ which allow us to find the path q„+i, applying 
Lemma C. 6 , such that q„+i enjoys the same properties. Therefore, starting from round r, we can 
connect in all rounds of A, successor states of S r and Q r . The Lemma is proven. ;D 


C.3 The case 2) ^ n — 2 


The last ingredient that we need to prove Theorem 4.2, is Lemma C.10 This can be done easily 
using the following result. 


Lemma C.9. Let A be a WOR protocol with safe-consensus objects. Suppose that there exists a 
partition n = A U B and a sequence 


p: So ~ • • • ~ Si (Z ^ 0) 

of connected states in round r ^ 0 of A, with the following properties 
I) iSets(p) = {A,B}; 

II) (V 6 G T^(n,2))(6 C A or 6 C B). 

Then in round r + 1 of A there exists a path 


q: Qo ~ • • • ~ Qs {s ^ 1) 
of connected states and the following properties hold: 


a) Each state Qk is of the form Qk = Sj ■ £(X), where X = A or X = B; 

b) iSets(q) = {^4, B}. 


Proof. This proof is very similar in spirit to the proof of Lemma C. 6 , so we omit it. 


□ 


Lemma C.10. Let n ^ 2. If A is a WOR protocol for n processes using safe-consensus objects 
with v^(n,2) n — 2 and S is a reachable state in A for some round r ^ 0 , then there exists 
a partition of the set n = A U B such that for all u ^ 0, the states S ■ £, U (A) and S ■ £“(-£>) are 
connected. 


Proof. This proof is analogous to the proof of Lemma C .8 We use Lemma B.3 to find the partition 
of n and then we apply induction combined with Lemma C.9 We omit the details. □ 


48 










C.4 The proof of Theorem 4.2 


Here we give the proof of Theorem 4.2 for any n ^ 2, thus completing all the necessary proofs of 
the paper. 


Proof of Theorem 4.2 Assume that there exists a protocol A for consensus such that there 
is some m with 2 ^ m ^ n with u^(n,m) ^ n — m. Let O, U be the initial states in which all 
processes have as input values Os and Is respectively. We now find successor states of O and U in 
each round r > 0, which are connected. We have cases: 


Case m = 2. By Lemma [C. 10 there exists a partition of n = Au B such that for any state S 
and any r ^ 0, S ■ £ r (A) and S ■ £ r (B) are connected. Let OU be the initial state in which all 
processes with ids in A have as input value Os and all processes with ids in B have as input 
values Is. Then for all r > 0 we have that 


0-?{A) ~ OU-C(A) and OU 


C{B) ~ U 


C(B) 


and by Lemma C. 10, the states OU ■ £ r (A) and OU ■ £ r (B) are connected. Thus, for any 


r-round partial execution of A, we can connect the states O r = O ■ £, r (A) and U r = U ■ £ r (B ). 


Case 3 ^ m ^ n. By Lemma 3.2 we know that any two initial states for consensus are 


connected, so that we can connect O and U with a sequence q of initial states of A and it is 
not hard to check that degq ^ n — 1 ^ n — m + 1. By Lemma C.8, for each round r ^ 0 
of A, there exist successor states O r , U r of O and U respectively, such that O r and U r are 
connected. 

In this way, we have connected successor states of O and U in each round of the protocol A. Now, 
O is a 0-valent, initial state, which is connected to the initial state U, so that we can apply Lemma 


3.3 to conclude that U is 0-valent. But this contradicts the fact that U is a 1-valent state, so we 
have reached a contradiction. Therefore ^(n, m) > n — m. □ 
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